src/core/ngx_file.c:196: error: Buffer Overrun S2
  Offset: [`path->name.len`, +oo] Size: [0, +oo] by call to `ngx_create_hashed_filename`.

src/core/ngx_file.c:140:1: Parameter `path->name.len`
138. 
139. 
140. ngx_int_t
     ^
141. ngx_create_temp_file(ngx_file_t *file, ngx_path_t *path, ngx_pool_t *pool,
142.     ngx_uint_t persistent, ngx_uint_t clean, ngx_uint_t access)

src/core/ngx_file.c:196:13: Call
194. 
195.         if (!prefix) {
196.             ngx_create_hashed_filename(path, file->name.data, file->name.len);
                 ^
197.         }
198. 

src/core/ngx_file.c:240:1: <Offset trace>
238. 
239. 
240. void
     ^
241. ngx_create_hashed_filename(ngx_path_t *path, u_char *file, size_t len)
242. {

src/core/ngx_file.c:240:1: Parameter `path->name.len`
  238. 
  239. 
  240. void
       ^
  241. ngx_create_hashed_filename(ngx_path_t *path, u_char *file, size_t len)
  242. {

src/core/ngx_file.c:246:5: Assignment
  244.     ngx_uint_t  n;
  245. 
  246.     i = path->name.len + 1;
           ^
  247. 
  248.     file[path->name.len + path->len]  = '/';

src/core/ngx_file.c:240:1: <Length trace>
238. 
239. 
240. void
     ^
241. ngx_create_hashed_filename(ngx_path_t *path, u_char *file, size_t len)
242. {

src/core/ngx_file.c:240:1: Parameter `*file`
  238. 
  239. 
  240. void
       ^
  241. ngx_create_hashed_filename(ngx_path_t *path, u_char *file, size_t len)
  242. {

src/core/ngx_file.c:258:9: Array access: Offset: [path->name.len, +oo] Size: [0, +oo] by call to `ngx_create_hashed_filename` 
  256. 
  257.         len -= level;
  258.         file[i - 1] = '/';
               ^
  259.         ngx_memcpy(&file[i], &file[len], level);
  260.         i += level + 1;
