src/http/ngx_http_request.c:471: error: Buffer Overrun L3
  Offset: [11, +oo] Size: [0, +oo] by call to `ngx_proxy_protocol_read`.

src/http/ngx_http_request.c:403:5: Assignment
401.     cscf = ngx_http_get_module_srv_conf(hc->conf_ctx, ngx_http_core_module);
402. 
403.     size = cscf->client_header_buffer_size;
         ^
404. 
405.     b = c->buffer;

src/http/ngx_http_request.c:408:13: Call
406. 
407.     if (b == NULL) {
408.         b = ngx_create_temp_buf(c->pool, size);
                 ^
409.         if (b == NULL) {
410.             ngx_http_close_connection(c);

src/core/ngx_buf.c:12:1: Parameter `size`
  10. 
  11. 
  12. ngx_buf_t *
      ^
  13. ngx_create_temp_buf(ngx_pool_t *pool, size_t size)
  14. {

src/core/ngx_buf.c:22:16: Call
  20.     }
  21. 
  22.     b->start = ngx_palloc(pool, size);
                     ^
  23.     if (b->start == NULL) {
  24.         return NULL;

src/core/ngx_palloc.c:127:16: Call
    125. #if !(NGX_DEBUG_PALLOC)
    126.     if (size <= pool->max) {
    127.         return ngx_palloc_small(pool, size, 1);
                        ^
    128.     }
    129. #endif

src/core/ngx_palloc.c:157:9: Assignment
      155. 
      156.     do {
      157.         m = p->d.last;
                   ^
      158. 
      159.         if (align) {

src/core/ngx_palloc.c:166:13: Assignment
      164.             p->d.last = m + size;
      165. 
      166.             return m;
                       ^
      167.         }
      168. 

src/core/ngx_palloc.c:127:9: Assignment
    125. #if !(NGX_DEBUG_PALLOC)
    126.     if (size <= pool->max) {
    127.         return ngx_palloc_small(pool, size, 1);
                 ^
    128.     }
    129. #endif

src/core/ngx_buf.c:22:5: Assignment
  20.     }
  21. 
  22.     b->start = ngx_palloc(pool, size);
          ^
  23.     if (b->start == NULL) {
  24.         return NULL;

src/core/ngx_buf.c:38:5: Assignment
  36.      */
  37. 
  38.     b->pos = b->start;
          ^
  39.     b->last = b->start;
  40.     b->end = b->last + size;

src/http/ngx_http_request.c:471:13: Call
469.         hc->proxy_protocol = 0;
470. 
471.         p = ngx_proxy_protocol_read(c, b->pos, b->last);
                 ^
472. 
473.         if (p == NULL) {

src/core/ngx_proxy_protocol.c:51:1: Parameter `*buf`
  49. 
  50. 
  51. u_char *
      ^
  52. ngx_proxy_protocol_read(ngx_connection_t *c, u_char *buf, u_char *last)
  53. {

src/core/ngx_proxy_protocol.c:60:5: Assignment
  58.     static const u_char signature[] = "\r\n\r\n\0\r\nQUIT\n";
  59. 
  60.     p = buf;
          ^
  61.     len = last - buf;
  62. 

src/core/ngx_proxy_protocol.c:73:5: Assignment
  71.     }
  72. 
  73.     p += 6;
          ^
  74.     len -= 6;
  75. 

src/core/ngx_proxy_protocol.c:89:5: Assignment
  87.     }
  88. 
  89.     p += 5;
          ^
  90. 
  91.     pp = ngx_pcalloc(c->pool, sizeof(ngx_proxy_protocol_t));

src/core/ngx_proxy_protocol.c:96:9: Call
  94.     }
  95. 
  96.     p = ngx_proxy_protocol_read_addr(c, p, last, &pp->src_addr);
              ^
  97.     if (p == NULL) {
  98.         goto invalid;

src/core/ngx_proxy_protocol.c:149:1: <Length trace>
147. 
148. 
149. static u_char *
     ^
150. ngx_proxy_protocol_read_addr(ngx_connection_t *c, u_char *p, u_char *last,
151.     ngx_str_t *addr)

src/core/ngx_proxy_protocol.c:149:1: Parameter `*p`
    147. 
    148. 
    149. static u_char *
         ^
    150. ngx_proxy_protocol_read_addr(ngx_connection_t *c, u_char *p, u_char *last,
    151.     ngx_str_t *addr)

src/core/ngx_proxy_protocol.c:163:14: Array access: Offset: [11, +oo] Size: [0, +oo] by call to `ngx_proxy_protocol_read` 
    161.         }
    162. 
    163.         ch = *p++;
                      ^
    164. 
    165.         if (ch == ' ') {
