src/http/modules/ngx_http_autoindex_module.c:745: error: Buffer Overrun L3
  Offset: [5, +oo] Size: [0, +oo] by call to `ngx_escape_json`.

src/http/modules/ngx_http_autoindex_module.c:730:9: Assignment
728. 
729.     if (callback) {
730.         b->last = ngx_cpymem(b->last, "/* callback */" CRLF,
             ^
731.                              sizeof("/* callback */" CRLF) - 1);
732. 

src/http/modules/ngx_http_autoindex_module.c:745:34: Call
743. 
744.         if (entry[i].escape) {
745.             b->last = (u_char *) ngx_escape_json(b->last, entry[i].name.data,
                                      ^
746.                                                  entry[i].name.len);
747.         } else {

src/core/ngx_string.c:1776:1: <Length trace>
1774. 
1775. 
1776. uintptr_t
      ^
1777. ngx_escape_json(u_char *dst, u_char *src, size_t size)
1778. {

src/core/ngx_string.c:1776:1: Parameter `*dst`
  1774. 
  1775. 
  1776. uintptr_t
        ^
  1777. ngx_escape_json(u_char *dst, u_char *src, size_t size)
  1778. {

src/core/ngx_string.c:1813:14: Assignment
  1811. 
  1812.         } else {
  1813.             *dst++ = '\\'; *dst++ = 'u'; *dst++ = '0'; *dst++ = '0';
                     ^
  1814.             *dst++ = '0' + (ch >> 4);
  1815. 

src/core/ngx_string.c:1813:29: Assignment
  1811. 
  1812.         } else {
  1813.             *dst++ = '\\'; *dst++ = 'u'; *dst++ = '0'; *dst++ = '0';
                                    ^
  1814.             *dst++ = '0' + (ch >> 4);
  1815. 

src/core/ngx_string.c:1813:43: Assignment
  1811. 
  1812.         } else {
  1813.             *dst++ = '\\'; *dst++ = 'u'; *dst++ = '0'; *dst++ = '0';
                                                  ^
  1814.             *dst++ = '0' + (ch >> 4);
  1815. 

src/core/ngx_string.c:1813:57: Assignment
  1811. 
  1812.         } else {
  1813.             *dst++ = '\\'; *dst++ = 'u'; *dst++ = '0'; *dst++ = '0';
                                                                ^
  1814.             *dst++ = '0' + (ch >> 4);
  1815. 

src/core/ngx_string.c:1814:14: Assignment
  1812.         } else {
  1813.             *dst++ = '\\'; *dst++ = 'u'; *dst++ = '0'; *dst++ = '0';
  1814.             *dst++ = '0' + (ch >> 4);
                     ^
  1815. 
  1816.             ch &= 0xf;

src/core/ngx_string.c:1818:13: Array access: Offset: [5, +oo] Size: [0, +oo] by call to `ngx_escape_json` 
  1816.             ch &= 0xf;
  1817. 
  1818.             *dst++ = (ch < 10) ? ('0' + ch) : ('A' + ch - 10);
                    ^
  1819.         }
  1820. 
