src/http/modules/ngx_http_scgi_module.c:548: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_parse_url`.

src/http/modules/ngx_http_scgi_module.c:539:9: Call
537.     ngx_memzero(&url, sizeof(ngx_url_t));
538. 
539.     if (ngx_http_script_run(r, &url.url, scf->scgi_lengths->elts, 0,
             ^
540.                             scf->scgi_values->elts)
541.         == NULL)

src/http/ngx_http_script.c:485:1: Parameter `len`
  483. 
  484. 
  485. u_char *
       ^
  486. ngx_http_script_run(ngx_http_request_t *r, ngx_str_t *value,
  487.     void *code_lengths, size_t len, void *code_values)

src/http/ngx_http_script.c:517:19: Call
  515. 
  516.     value->len = len;
  517.     value->data = ngx_pnalloc(r->pool, len);
                         ^
  518.     if (value->data == NULL) {
  519.         return NULL;

src/core/ngx_palloc.c:140:16: Call
    138. #if !(NGX_DEBUG_PALLOC)
    139.     if (size <= pool->max) {
    140.         return ngx_palloc_small(pool, size, 0);
                        ^
    141.     }
    142. #endif

src/core/ngx_palloc.c:157:9: Assignment
      155. 
      156.     do {
      157.         m = p->d.last;
                   ^
      158. 
      159.         if (align) {

src/core/ngx_palloc.c:166:13: Assignment
      164.             p->d.last = m + size;
      165. 
      166.             return m;
                       ^
      167.         }
      168. 

src/core/ngx_palloc.c:140:9: Assignment
    138. #if !(NGX_DEBUG_PALLOC)
    139.     if (size <= pool->max) {
    140.         return ngx_palloc_small(pool, size, 0);
                 ^
    141.     }
    142. #endif

src/http/ngx_http_script.c:517:5: Assignment
  515. 
  516.     value->len = len;
  517.     value->data = ngx_pnalloc(r->pool, len);
           ^
  518.     if (value->data == NULL) {
  519.         return NULL;

src/http/modules/ngx_http_scgi_module.c:548:9: Call
546.     url.no_resolve = 1;
547. 
548.     if (ngx_parse_url(r->pool, &url) != NGX_OK) {
             ^
549.         if (url.err) {
550.             ngx_log_error(NGX_LOG_ERR, r->connection->log, 0,

src/core/ngx_inet.c:528:1: Parameter `*u->url.data`
  526. 
  527. 
  528. ngx_int_t
       ^
  529. ngx_parse_url(ngx_pool_t *pool, ngx_url_t *u)
  530. {

src/core/ngx_inet.c:543:12: Call
  541.     }
  542. 
  543.     return ngx_parse_inet_url(pool, u);
                  ^
  544. }
  545. 

src/core/ngx_inet.c:670:13: Assignment
    668. 
    669.         if (uri < port) {
    670.             port = NULL;
                     ^
    671.         }
    672.     }

src/core/ngx_inet.c:675:9: Assignment
    673. 
    674.     if (port) {
    675.         port++;
                 ^
    676. 
    677.         len = last - port;

src/core/ngx_inet.c:679:13: Call
    677.         len = last - port;
    678. 
    679.         n = ngx_atoi(port, len);
                     ^
    680. 
    681.         if (n < 1 || n > 65535) {

src/core/ngx_string.c:901:1: <Length trace>
899. 
900. 
901. ngx_int_t
     ^
902. ngx_atoi(u_char *line, size_t n)
903. {

src/core/ngx_string.c:901:1: Parameter `*line`
      899. 
      900. 
      901. ngx_int_t
           ^
      902. ngx_atoi(u_char *line, size_t n)
      903. {

src/core/ngx_string.c:914:13: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_parse_url` 
      912. 
      913.     for (value = 0; n--; line++) {
      914.         if (*line < '0' || *line > '9') {
                       ^
      915.             return NGX_ERROR;
      916.         }
