src/core/ngx_file.c:114: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_create_temp_file`.

src/core/ngx_file.c:114:14: Call
112. 
113.     if (tf->file.fd == NGX_INVALID_FILE) {
114.         rc = ngx_create_temp_file(&tf->file, tf->prefix ? NULL : tf->path,
                  ^
115.                                   tf->pool, tf->persistent, tf->clean,
116.                                   tf->access);

src/core/ngx_file.c:132:1: Parameter `path->level[*]`
  130. 
  131. 
  132. ngx_int_t
       ^
  133. ngx_create_temp_file(ngx_file_t *file, ngx_path_t *path, ngx_pool_t *pool,
  134.     ngx_uint_t persistent, ngx_uint_t clean, ngx_uint_t access)

src/core/ngx_file.c:214:13: Call
  212.         }
  213. 
  214.         if (ngx_create_path(file, path) == NGX_ERROR) {
                   ^
  215.             return NGX_ERROR;
  216.         }

src/core/ngx_file.c:246:1: <Offset trace>
244. 
245. 
246. ngx_int_t
     ^
247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
248. {

src/core/ngx_file.c:246:1: Parameter `path->level[*]`
    244. 
    245. 
    246. ngx_int_t
         ^
    247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
    248. {

src/core/ngx_file.c:260:9: Assignment
    258.         }
    259. 
    260.         pos += path->level[i] + 1;
                 ^
    261. 
    262.         file->name.data[pos] = '\0';

src/core/ngx_file.c:246:1: <Length trace>
244. 
245. 
246. ngx_int_t
     ^
247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
248. {

src/core/ngx_file.c:246:1: Parameter `*file->name.data`
    244. 
    245. 
    246. ngx_int_t
         ^
    247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
    248. {

src/core/ngx_file.c:277:9: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_create_temp_file` 
    275.         }
    276. 
    277.         file->name.data[pos] = '/';
                 ^
    278.     }
    279. 
