src/http/ngx_http_upstream.c:5044: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo].

src/http/ngx_http_upstream.c:5024:9: <Length trace>
5022.     }
5023. 
5024.     p = ngx_pnalloc(r->pool, len);
              ^
5025.     if (p == NULL) {
5026.         return NGX_ERROR;

src/http/ngx_http_upstream.c:5024:9: Call
5022.     }
5023. 
5024.     p = ngx_pnalloc(r->pool, len);
              ^
5025.     if (p == NULL) {
5026.         return NGX_ERROR;

src/core/ngx_palloc.c:144:12: Call
  142. #endif
  143. 
  144.     return ngx_palloc_large(pool, size);
                  ^
  145. }
  146. 

src/core/ngx_palloc.c:220:9: Call
    218.     ngx_pool_large_t  *large;
    219. 
    220.     p = ngx_alloc(size, pool->log);
                 ^
    221.     if (p == NULL) {
    222.         return NULL;

src/os/unix/ngx_alloc.c:17:1: Parameter `log->next->disk_full_time`
      15. 
      16. 
      17. void *
          ^
      18. ngx_alloc(size_t size, ngx_log_t *log)
      19. {

src/http/ngx_http_upstream.c:5035:13: Assignment
5033.     for ( ;; ) {
5034.         if (state[i].peer) {
5035.             p = ngx_cpymem(p, state[i].peer->data, state[i].peer->len);
                  ^
5036.         }
5037. 

src/http/ngx_http_upstream.c:5043:14: Assignment
5041. 
5042.         if (state[i].peer) {
5043.             *p++ = ',';
                   ^
5044.             *p++ = ' ';
5045. 

src/http/ngx_http_upstream.c:5044:13: Array access: Offset: [1, +oo] Size: [0, +oo]
5042.         if (state[i].peer) {
5043.             *p++ = ',';
5044.             *p++ = ' ';
                  ^
5045. 
5046.         } else {
