modules/proxy/ajp_header.c:693: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 4):unsigned64 by call to `ajp_ilink_send`.

modules/proxy/ajp_header.c:686:10: Call
684.     }
685. 
686.     rc = ajp_marshal_into_msgb(msg, r, uri, secret);
              ^
687.     if (rc != APR_SUCCESS) {
688.         ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(00988)

modules/proxy/ajp_header.c:247:9: Call
  245.     ajp_msg_reset(msg);
  246. 
  247.     if (ajp_msg_append_uint8(msg, CMD_AJP13_FORWARD_REQUEST)     ||
               ^
  248.         ajp_msg_append_uint8(msg, (apr_byte_t) method)           ||
  249.         ajp_msg_append_string(msg, r->protocol)                  ||

modules/proxy/ajp_msg.c:308:1: Parameter `*msg->buf`
    306.  * @return          APR_SUCCESS or error
    307.  */
    308. apr_status_t ajp_msg_append_uint8(ajp_msg_t *msg, apr_byte_t value)
         ^
    309. {
    310.     apr_size_t len = msg->len;

modules/proxy/ajp_header.c:693:10: Call
691.     }
692. 
693.     rc = ajp_ilink_send(sock, msg);
              ^
694.     ajp_msg_log(r, msg, "ajp_send_header: ajp_ilink_send packet dump");
695.     if (rc != APR_SUCCESS) {

modules/proxy/ajp_link.c:21:1: Parameter `msg->len`
  19. APLOG_USE_MODULE(proxy_ajp);
  20. 
  21. apr_status_t ajp_ilink_send(apr_socket_t *sock, ajp_msg_t *msg)
      ^
  22. {
  23.     char         *buf;

modules/proxy/ajp_link.c:27:5: Call
  25.     apr_size_t   length;
  26. 
  27.     ajp_msg_end(msg);
          ^
  28. 
  29.     length = msg->len;

modules/proxy/ajp_msg.c:225:1: <LHS trace>
223.  * @return          APR_SUCCESS or error
224.  */
225. apr_status_t ajp_msg_end(ajp_msg_t *msg)
     ^
226. {
227.     apr_size_t len = msg->len - AJP_HEADER_LEN;

modules/proxy/ajp_msg.c:225:1: Parameter `msg->len`
    223.  * @return          APR_SUCCESS or error
    224.  */
    225. apr_status_t ajp_msg_end(ajp_msg_t *msg)
         ^
    226. {
    227.     apr_size_t len = msg->len - AJP_HEADER_LEN;

modules/proxy/ajp_msg.c:227:5: Binary operation: ([0, +oo] - 4):unsigned64 by call to `ajp_ilink_send` 
    225. apr_status_t ajp_msg_end(ajp_msg_t *msg)
    226. {
    227.     apr_size_t len = msg->len - AJP_HEADER_LEN;
             ^
    228. 
    229.     if (msg->server_side) {
