src/core/ngx_resolver.c:2509: error: Buffer Overrun L3
  Offset added: [34, +oo] (⇐ [17, +oo] + [17, +oo]) Size: [17, +oo] by call to `ngx_resolve_name_locked`.

src/core/ngx_resolver.c:2461:13: Call
2459.         }
2460. 
2461.         if (ngx_resolver_copy(r, &name, buf, cname, buf + n) != NGX_OK) {
                  ^
2462.             goto failed;
2463.         }

src/core/ngx_resolver.c:3930:1: Parameter `name->len`
  3928. 
  3929. 
  3930. static ngx_int_t
        ^
  3931. ngx_resolver_copy(ngx_resolver_t *r, ngx_str_t *name, u_char *buf, u_char *src,
  3932.     u_char *last)

src/core/ngx_resolver.c:2509:20: Call
2507.             }
2508. 
2509.             (void) ngx_resolve_name_locked(r, ctx, &name);
                         ^
2510.         }
2511. 

src/core/ngx_resolver.c:573:1: Parameter `name->len`
  571. 
  572. 
  573. static ngx_int_t
       ^
  574. ngx_resolve_name_locked(ngx_resolver_t *r, ngx_resolver_ctx_t *ctx,
  575.     ngx_str_t *name)

src/core/ngx_resolver.c:813:14: Call
  811. 
  812.     } else {
  813.         rc = ngx_resolver_create_name_query(r, rn, name);
                    ^
  814.     }
  815. 

src/core/ngx_resolver.c:3632:12: <Offset trace>
3630.     ngx_resolver_hdr_t  *query;
3631. 
3632.     nlen = name->len ? (1 + name->len + 1) : 1;
                 ^
3633. 
3634.     len = sizeof(ngx_resolver_hdr_t) + nlen + sizeof(ngx_resolver_qs_t);

src/core/ngx_resolver.c:3632:12: Assignment
    3630.     ngx_resolver_hdr_t  *query;
    3631. 
    3632.     nlen = name->len ? (1 + name->len + 1) : 1;
                     ^
    3633. 
    3634.     len = sizeof(ngx_resolver_hdr_t) + nlen + sizeof(ngx_resolver_qs_t);

src/core/ngx_resolver.c:3632:5: Assignment
    3630.     ngx_resolver_hdr_t  *query;
    3631. 
    3632.     nlen = name->len ? (1 + name->len + 1) : 1;
              ^
    3633. 
    3634.     len = sizeof(ngx_resolver_hdr_t) + nlen + sizeof(ngx_resolver_qs_t);

src/core/ngx_resolver.c:3634:5: Assignment
    3632.     nlen = name->len ? (1 + name->len + 1) : 1;
    3633. 
    3634.     len = sizeof(ngx_resolver_hdr_t) + nlen + sizeof(ngx_resolver_qs_t);
              ^
    3635. 
    3636. #if (NGX_HAVE_INET6)

src/core/ngx_resolver.c:3645:5: Assignment
    3643.     }
    3644. 
    3645.     rn->qlen = (u_short) len;
              ^
    3646.     rn->query = p;
    3647. 

src/core/ngx_resolver.c:3622:1: <Length trace>
3620. 
3621. 
3622. static ngx_int_t
      ^
3623. ngx_resolver_create_name_query(ngx_resolver_t *r, ngx_resolver_node_t *rn,
3624.     ngx_str_t *name)

src/core/ngx_resolver.c:3622:1: Parameter `*rn->query6`
    3620. 
    3621. 
    3622. static ngx_int_t
          ^
    3623. ngx_resolver_create_name_query(ngx_resolver_t *r, ngx_resolver_node_t *rn,
    3624.     ngx_str_t *name)

src/core/ngx_resolver.c:3721:5: Assignment
    3719.     }
    3720. 
    3721.     p = rn->query6;
              ^
    3722. 
    3723.     ngx_memcpy(p, rn->query, rn->qlen);

src/core/ngx_resolver.c:3723:5: Array access: Offset added: [34, +oo] (⇐ [17, +oo] + [17, +oo]) Size: [17, +oo] by call to `ngx_resolve_name_locked` 
    3721.     p = rn->query6;
    3722. 
    3723.     ngx_memcpy(p, rn->query, rn->qlen);
              ^
    3724. 
    3725.     query = (ngx_resolver_hdr_t *) p;
