src/http/modules/ngx_http_ssi_filter_module.c:747: error: Buffer Overrun L3
  Offset: [0, 15] Size: [0, +oo].

src/http/modules/ngx_http_ssi_filter_module.c:743:22: <Offset trace>
741.                 param = ctx->params.elts;
742. 
743.                 for (i = 0; i < ctx->params.nelts; i++) {
                          ^
744. 
745.                     for (prm = cmd->params; prm->name.len; prm++) {

src/http/modules/ngx_http_ssi_filter_module.c:743:22: Assignment
741.                 param = ctx->params.elts;
742. 
743.                 for (i = 0; i < ctx->params.nelts; i++) {
                          ^
744. 
745.                     for (prm = cmd->params; prm->name.len; prm++) {

src/http/modules/ngx_http_ssi_filter_module.c:473:18: <Length trace>
471.                            "saved: %uz state: %ui", ctx->saved, ctx->state);
472. 
473.             rc = ngx_http_ssi_parse(r, ctx);
                      ^
474. 
475.             ngx_log_debug4(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,

src/http/modules/ngx_http_ssi_filter_module.c:473:18: Call
471.                            "saved: %uz state: %ui", ctx->saved, ctx->state);
472. 
473.             rc = ngx_http_ssi_parse(r, ctx);
                      ^
474. 
475.             ngx_log_debug4(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,

src/http/modules/ngx_http_ssi_filter_module.c:988:1: Parameter `*ctx->params.elts`
  986. 
  987. 
  988. static ngx_int_t
       ^
  989. ngx_http_ssi_parse(ngx_http_request_t *r, ngx_http_ssi_ctx_t *ctx)
  990. {

src/http/modules/ngx_http_ssi_filter_module.c:741:17: Assignment
739.                            (NGX_HTTP_SSI_MAX_PARAMS + 1) * sizeof(ngx_str_t *));
740. 
741.                 param = ctx->params.elts;
                     ^
742. 
743.                 for (i = 0; i < ctx->params.nelts; i++) {

src/http/modules/ngx_http_ssi_filter_module.c:747:29: Array access: Offset: [0, 15] Size: [0, +oo]
745.                     for (prm = cmd->params; prm->name.len; prm++) {
746. 
747.                         if (param[i].key.len != prm->name.len
                                 ^
748.                             || ngx_strncmp(param[i].key.data, prm->name.data,
749.                                            prm->name.len) != 0)
