src/core/ngx_file.c:214: error: Buffer Overrun S2
  Offset: [`path->name.len` + 1, +oo] Size: [0, +oo] by call to `ngx_create_path`.

src/core/ngx_file.c:132:1: Parameter `path->level[*]`
130. 
131. 
132. ngx_int_t
     ^
133. ngx_create_temp_file(ngx_file_t *file, ngx_path_t *path, ngx_pool_t *pool,
134.     ngx_uint_t persistent, ngx_uint_t clean, ngx_uint_t access)

src/core/ngx_file.c:214:13: Call
212.         }
213. 
214.         if (ngx_create_path(file, path) == NGX_ERROR) {
                 ^
215.             return NGX_ERROR;
216.         }

src/core/ngx_file.c:246:1: <Offset trace>
244. 
245. 
246. ngx_int_t
     ^
247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
248. {

src/core/ngx_file.c:246:1: Parameter `path->level[*]`
  244. 
  245. 
  246. ngx_int_t
       ^
  247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
  248. {

src/core/ngx_file.c:260:9: Assignment
  258.         }
  259. 
  260.         pos += path->level[i] + 1;
               ^
  261. 
  262.         file->name.data[pos] = '\0';

src/core/ngx_file.c:246:1: <Length trace>
244. 
245. 
246. ngx_int_t
     ^
247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
248. {

src/core/ngx_file.c:246:1: Parameter `*file->name.data`
  244. 
  245. 
  246. ngx_int_t
       ^
  247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
  248. {

src/core/ngx_file.c:277:9: Array access: Offset: [path->name.len + 1, +oo] Size: [0, +oo] by call to `ngx_create_path` 
  275.         }
  276. 
  277.         file->name.data[pos] = '/';
               ^
  278.     }
  279. 
