src/http/ngx_http_header_filter_module.c:430: error: Buffer Overrun L3
  Offset added: 9 Size: [0, +oo].

src/http/ngx_http_header_filter_module.c:348:9: <Length trace>
346.         }
347. 
348.         len += sizeof("Location: https://") - 1
             ^
349.                + host.len
350.                + r->headers_out.location->value.len + 2;

src/http/ngx_http_header_filter_module.c:348:9: Assignment
346.         }
347. 
348.         len += sizeof("Location: https://") - 1
             ^
349.                + host.len
350.                + r->headers_out.location->value.len + 2;

src/http/ngx_http_header_filter_module.c:377:9: Assignment
375. 
376.     if (r->keepalive) {
377.         len += sizeof("Connection: keep-alive" CRLF) - 1;
             ^
378. 
379.         /*

src/http/ngx_http_header_filter_module.c:424:9: Call
422.     }
423. 
424.     b = ngx_create_temp_buf(r->pool, len);
             ^
425.     if (b == NULL) {
426.         return NGX_ERROR;

src/core/ngx_buf.c:11:1: Parameter `size`
   9. 
  10. 
  11. ngx_buf_t *
      ^
  12. ngx_create_temp_buf(ngx_pool_t *pool, size_t size)
  13. {

src/core/ngx_buf.c:21:16: Call
  19.     }
  20. 
  21.     b->start = ngx_palloc(pool, size);
                     ^
  22.     if (b->start == NULL) {
  23.         return NULL;

src/core/ngx_palloc.c:125:13: Assignment
    123. 
    124.         do {
    125.             m = ngx_align_ptr(p->d.last, NGX_ALIGNMENT);
                     ^
    126. 
    127.             if ((size_t) (p->d.end - m) >= size) {

src/core/ngx_palloc.c:130:17: Assignment
    128.                 p->d.last = m + size;
    129. 
    130.                 return m;
                         ^
    131.             }
    132. 

src/core/ngx_buf.c:21:5: Assignment
  19.     }
  20. 
  21.     b->start = ngx_palloc(pool, size);
          ^
  22.     if (b->start == NULL) {
  23.         return NULL;

src/core/ngx_buf.c:38:5: Assignment
  36. 
  37.     b->pos = b->start;
  38.     b->last = b->start;
          ^
  39.     b->end = b->last + size;
  40.     b->temporary = 1;

src/http/ngx_http_header_filter_module.c:430:15: Array access: Offset added: 9 Size: [0, +oo]
428. 
429.     /* "HTTP/1.x " */
430.     b->last = ngx_cpymem(b->last, "HTTP/1.1 ", sizeof("HTTP/1.x ") - 1);
                   ^
431. 
432.     /* status line */
