src/http/modules/ngx_http_log_module.c:1428: error: Buffer Overrun L3
  Offset: [3, +oo] Size: [1, +oo] by call to `ngx_http_compile_complex_value`.

src/http/modules/ngx_http_log_module.c:1197:9: Call
1195.     }
1196. 
1197.     n = ngx_http_script_variables_count(&value[1]);
              ^
1198. 
1199.     if (n == 0) {

src/http/ngx_http_script.c:317:1: Parameter `value->len`
  315. 
  316. 
  317. ngx_uint_t
       ^
  318. ngx_http_script_variables_count(ngx_str_t *value)
  319. {

src/http/modules/ngx_http_log_module.c:1206:13: Call
1204. 
1205.     } else {
1206.         if (ngx_conf_full_name(cf->cycle, &value[1], 0) != NGX_OK) {
                  ^
1207.             return NGX_CONF_ERROR;
1208.         }

src/core/ngx_conf_file.c:800:1: Parameter `*name->data`
  798. 
  799. 
  800. ngx_int_t
       ^
  801. ngx_conf_full_name(ngx_cycle_t *cycle, ngx_str_t *name, ngx_uint_t conf_prefix)
  802. {

src/core/ngx_conf_file.c:807:12: Call
  805.     prefix = conf_prefix ? &cycle->conf_prefix : &cycle->prefix;
  806. 
  807.     return ngx_get_full_name(cycle->pool, prefix, name);
                  ^
  808. }
  809. 

src/core/ngx_file.c:20:1: Parameter `*name->data`
    18. 
    19. 
    20. ngx_int_t
        ^
    21. ngx_get_full_name(ngx_pool_t *pool, ngx_str_t *prefix, ngx_str_t *name)
    22. {

src/http/modules/ngx_http_log_module.c:1343:13: Assignment
1341.         if (ngx_strncmp(value[i].data, "if=", 3) == 0) {
1342.             filter.len = value[i].len - 3;
1343.             filter.data = value[i].data + 3;
                  ^
1344.             continue;
1345.         }

src/http/modules/ngx_http_log_module.c:1428:13: Call
1426.         ccv.complex_value = log->filter;
1427. 
1428.         if (ngx_http_compile_complex_value(&ccv) != NGX_OK) {
                  ^
1429.             return NGX_CONF_ERROR;
1430.         }

src/http/ngx_http_script.c:107:1: Parameter `*ccv->value->data`
  105. 
  106. 
  107. ngx_int_t
       ^
  108. ngx_http_compile_complex_value(ngx_http_compile_complex_value_t *ccv)
  109. {

src/http/ngx_http_script.c:134:13: Call
  132.         && (ccv->conf_prefix || ccv->root_prefix))
  133.     {
  134.         if (ngx_conf_full_name(ccv->cf->cycle, v, ccv->conf_prefix) != NGX_OK) {
                   ^
  135.             return NGX_ERROR;
  136.         }

src/core/ngx_conf_file.c:800:1: Parameter `*name->data`
    798. 
    799. 
    800. ngx_int_t
         ^
    801. ngx_conf_full_name(ngx_cycle_t *cycle, ngx_str_t *name, ngx_uint_t conf_prefix)
    802. {

src/core/ngx_conf_file.c:807:12: Call
    805.     prefix = conf_prefix ? &cycle->conf_prefix : &cycle->prefix;
    806. 
    807.     return ngx_get_full_name(cycle->pool, prefix, name);
                    ^
    808. }
    809. 

src/core/ngx_file.c:20:1: Parameter `*name->data`
      18. 
      19. 
      20. ngx_int_t
          ^
      21. ngx_get_full_name(ngx_pool_t *pool, ngx_str_t *prefix, ngx_str_t *name)
      22. {

src/core/ngx_file.c:49:5: Call
      47. 
      48.     p = ngx_cpymem(n, prefix->data, len);
      49.     ngx_cpystrn(p, name->data, name->len + 1);
              ^
      50. 
      51.     name->len += len;

src/core/ngx_string.c:32:1: <Length trace>
30. 
31. 
32. u_char *
    ^
33. ngx_cpystrn(u_char *dst, u_char *src, size_t n)
34. {

src/core/ngx_string.c:32:1: Parameter `*src`
        30. 
        31. 
        32. u_char *
            ^
        33. ngx_cpystrn(u_char *dst, u_char *src, size_t n)
        34. {

src/core/ngx_string.c:40:16: Array access: Offset: [3, +oo] Size: [1, +oo] by call to `ngx_http_compile_complex_value` 
        38. 
        39.     while (--n) {
        40.         *dst = *src;
                           ^
        41. 
        42.         if (*dst == '\0') {
