src/http/ngx_http_request.c:1107: error: Buffer Overrun L3
  Offset: [2, +oo] Size: [0, +oo] by call to `ngx_http_process_request_header`.

src/http/ngx_http_request.c:1105:13: Assignment
1103.             r->request_length += r->header_in->pos - r->header_in->start;
1104. 
1105.             r->http_state = NGX_HTTP_PROCESS_REQUEST_STATE;
                  ^
1106. 
1107.             rc = ngx_http_process_request_header(r);

src/http/ngx_http_request.c:1107:18: Call
1105.             r->http_state = NGX_HTTP_PROCESS_REQUEST_STATE;
1106. 
1107.             rc = ngx_http_process_request_header(r);
                       ^
1108. 
1109.             if (rc != NGX_OK) {

src/http/ngx_http_request.c:1525:1: Parameter `r->http_connection->nfree`
  1523. 
  1524. 
  1525. static ngx_int_t
        ^
  1526. ngx_http_process_request_header(ngx_http_request_t *r)
  1527. {

src/http/ngx_http_request.c:1532:9: Call
  1530.         == NGX_ERROR)
  1531.     {
  1532.         ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR);
                ^
  1533.         return NGX_ERROR;
  1534.     }

src/http/ngx_http_request.c:1882:1: Parameter `r->http_connection->nfree`
    1880. 
    1881. 
    1882. void
          ^
    1883. ngx_http_finalize_request(ngx_http_request_t *r, ngx_int_t rc)
    1884. {

src/http/ngx_http_request.c:2071:5: Call
    2069.     }
    2070. 
    2071.     ngx_http_finalize_connection(r);
              ^
    2072. }
    2073. 

src/http/ngx_http_request.c:2135:1: Parameter `r->http_connection->nfree`
      2133. 
      2134. 
      2135. static void
            ^
      2136. ngx_http_finalize_connection(ngx_http_request_t *r)
      2137. {

src/http/ngx_http_request.c:2163:9: Call
      2161.          && clcf->keepalive_timeout > 0)
      2162.     {
      2163.         ngx_http_set_keepalive(r);
                    ^
      2164.         return;
      2165.     }

src/http/ngx_http_request.c:2402:1: <Offset trace>
2400. 
2401. 
2402. static void
      ^
2403. ngx_http_set_keepalive(ngx_http_request_t *r)
2404. {

src/http/ngx_http_request.c:2402:1: Parameter `r->http_connection->nfree`
        2400. 
        2401. 
        2402. static void
              ^
        2403. ngx_http_set_keepalive(ngx_http_request_t *r)
        2404. {

src/http/ngx_http_request.c:2402:1: <Length trace>
2400. 
2401. 
2402. static void
      ^
2403. ngx_http_set_keepalive(ngx_http_request_t *r)
2404. {

src/http/ngx_http_request.c:2402:1: Parameter `*r->http_connection->free`
        2400. 
        2401. 
        2402. static void
              ^
        2403. ngx_http_set_keepalive(ngx_http_request_t *r)
        2404. {

src/http/ngx_http_request.c:2461:17: Array access: Offset: [2, +oo] Size: [0, +oo] by call to `ngx_http_process_request_header` 
        2459.             for (i = 0; i < hc->nbusy - 1; i++) {
        2460.                 f = hc->busy[i];
        2461.                 hc->free[hc->nfree++] = f;
                              ^
        2462.                 f->pos = f->start;
        2463.                 f->last = f->start;
