modules/aaa/mod_authz_host.c:199: error: BUFFER_OVERRUN_L1
  Offset: [1, +oo] Size: 1 by call to `ap_getword_conf`.

modules/aaa/mod_authz_host.c:187:19: Call
185.         const char *require;
186. 
187.         require = ap_expr_str_exec(r, expr, &err);
                       ^
188.         if (err) {
189.             ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02593)

server/util_expr_eval.c:999:1: Parameter `*info->root_node->node_arg1`
   997. }
   998. 
   999. AP_DECLARE(const char *) ap_expr_str_exec(request_rec *r,
        ^
  1000.                                           const ap_expr_info_t *info,
  1001.                                           const char **err)

server/util_expr_eval.c:1003:12: Call
  1001.                                           const char **err)
  1002. {
  1003.     return ap_expr_str_exec_re(r, info, 0, NULL, NULL, err);
                   ^
  1004. }
  1005. 

server/util_expr_eval.c:992:9: Assignment
    990.         return result;
    991.     else if (rc < 0)
    992.         return NULL;
                 ^
    993.     else
    994.         ap_assert(0);

server/util_expr_eval.c:1003:5: Assignment
  1001.                                           const char **err)
  1002. {
  1003.     return ap_expr_str_exec_re(r, info, 0, NULL, NULL, err);
            ^
  1004. }
  1005. 

modules/aaa/mod_authz_host.c:187:9: Assignment
185.         const char *require;
186. 
187.         require = ap_expr_str_exec(r, expr, &err);
             ^
188.         if (err) {
189.             ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02593)

modules/aaa/mod_authz_host.c:198:9: Assignment
196.             host names to check rather than a single name.  This is different
197.             from the previous host based syntax. */
198.         t = require;
             ^
199.         while ((w = ap_getword_conf(r->pool, &t)) && w[0]) {
200.             /* '#' is not valid hostname character and admin could specify

modules/aaa/mod_authz_host.c:199:21: Call
197.             from the previous host based syntax. */
198.         t = require;
199.         while ((w = ap_getword_conf(r->pool, &t)) && w[0]) {
                         ^
200.             /* '#' is not valid hostname character and admin could specify
201.              * 'Require host localhost# Add example.com later'. We should not

server/util.c:781:1: <Length trace>
779. }
780. 
781. AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line)
     ^
782. {
783.     const char *str = *line, *strend;

server/util.c:781:1: Parameter `**line`
  779. }
  780. 
  781. AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line)
       ^
  782. {
  783.     const char *str = *line, *strend;

server/util.c:783:5: Assignment
  781. AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line)
  782. {
  783.     const char *str = *line, *strend;
           ^
  784.     char *res;
  785.     char quote;

server/util.c:796:9: Assignment
  794. 
  795.     if ((quote = *str) == '"' || quote == '\'') {
  796.         strend = str + 1;
               ^
  797.         while (*strend && *strend != quote) {
  798.             if (*strend == '\\' && strend[1] &&

server/util.c:797:16: Array access: Offset: [1, +oo] Size: 1 by call to `ap_getword_conf` 
  795.     if ((quote = *str) == '"' || quote == '\'') {
  796.         strend = str + 1;
  797.         while (*strend && *strend != quote) {
                      ^
  798.             if (*strend == '\\' && strend[1] &&
  799.                 (strend[1] == quote || strend[1] == '\\')) {
