src/http/modules/ngx_http_limit_req_module.c:259: error: Buffer Overrun L3
  Offset: [-10, +oo] Size: 2048 by call to `ngx_log_error_core`.

src/http/modules/ngx_http_limit_req_module.c:253:13: Call
251.     }
252. 
253.     delay = ngx_http_limit_req_account(limits, n, &excess, &limit);
                 ^
254. 
255.     if (!delay) {

src/http/modules/ngx_http_limit_req_module.c:522:9: Assignment
  520.         ngx_shmtx_unlock(&ctx->shpool->mutex);
  521. 
  522.         ctx->node = NULL;
               ^
  523. 
  524.         if (limits[n].nodelay) {

src/http/modules/ngx_http_limit_req_module.c:259:5: Call
257.     }
258. 
259.     ngx_log_error(lrcf->delay_log_level, r->connection->log, 0,
         ^
260.                   "delaying request, excess: %ui.%03ui, by zone \"%V\"",
261.                   excess / 1000, excess % 1000, &limit->shm_zone->shm.name);

src/core/ngx_log.c:76:1: Global `err_levels.len`
  74. #if (NGX_HAVE_VARIADIC_MACROS)
  75. 
  76. void
      ^
  77. ngx_log_error_core(ngx_uint_t level, ngx_log_t *log, ngx_err_t err,
  78.     const char *fmt, ...)

src/core/ngx_log.c:152:5: Assignment
  150.     }
  151. 
  152.     msg -= (7 + err_levels[level].len + 3);
           ^
  153. 
  154.     (void) ngx_sprintf(msg, "nginx: [%V] ", &err_levels[level]);

src/core/ngx_log.c:154:12: Call
  152.     msg -= (7 + err_levels[level].len + 3);
  153. 
  154.     (void) ngx_sprintf(msg, "nginx: [%V] ", &err_levels[level]);
                  ^
  155. 
  156.     (void) ngx_write_console(ngx_stderr, msg, p - msg);

src/core/ngx_string.c:102:1: Parameter `*buf`
    100. 
    101. 
    102. u_char * ngx_cdecl
         ^
    103. ngx_sprintf(u_char *buf, const char *fmt, ...)
    104. {

src/core/ngx_string.c:109:9: Call
    107. 
    108.     va_start(args, fmt);
    109.     p = ngx_vslprintf(buf, (void *) -1, fmt, args);
                 ^
    110.     va_end(args);
    111. 

src/core/ngx_string.c:144:1: <Length trace>
142. 
143. 
144. u_char *
     ^
145. ngx_vslprintf(u_char *buf, u_char *last, const char *fmt, va_list args)
146. {

src/core/ngx_string.c:144:1: Parameter `*buf`
      142. 
      143. 
      144. u_char *
           ^
      145. ngx_vslprintf(u_char *buf, u_char *last, const char *fmt, va_list args)
      146. {

src/core/ngx_string.c:363:21: Array access: Offset: [-10, +oo] Size: 2048 by call to `ngx_log_error_core` 
      361. 
      362.                 if (f < 0) {
      363.                     *buf++ = '-';
                               ^
      364.                     f = -f;
      365.                 }
