src/http/modules/ngx_http_log_module.c:1333: error: Buffer Overrun L3
  Offset: [7, +oo] (⇐ 7 + [0, +oo]) Size: [1, +oo] by call to `ngx_parse_size`.

src/http/modules/ngx_http_log_module.c:1260:9: Call
1258.     }
1259. 
1260.     n = ngx_http_script_variables_count(&value[1]);
              ^
1261. 
1262.     if (n == 0) {

src/http/ngx_http_script.c:317:1: Parameter `value->len`
  315. 
  316. 
  317. ngx_uint_t
       ^
  318. ngx_http_script_variables_count(ngx_str_t *value)
  319. {

src/http/modules/ngx_http_log_module.c:1263:21: Call
1261. 
1262.     if (n == 0) {
1263.         log->file = ngx_conf_open_file(cf->cycle, &value[1]);
                          ^
1264.         if (log->file == NULL) {
1265.             return NGX_CONF_ERROR;

src/core/ngx_conf_file.c:890:1: Parameter `name->len`
  888. 
  889. 
  890. ngx_open_file_t *
       ^
  891. ngx_conf_open_file(ngx_cycle_t *cycle, ngx_str_t *name)
  892. {

src/http/modules/ngx_http_log_module.c:1330:13: Assignment
1328. 
1329.         if (ngx_strncmp(value[i].data, "buffer=", 7) == 0) {
1330.             s.len = value[i].len - 7;
                  ^
1331.             s.data = value[i].data + 7;
1332. 

src/http/modules/ngx_http_log_module.c:1333:20: Call
1331.             s.data = value[i].data + 7;
1332. 
1333.             size = ngx_parse_size(&s);
                         ^
1334. 
1335.             if (size == NGX_ERROR || size == 0) {

src/core/ngx_parse.c:12:1: <Offset trace>
10. 
11. 
12. ssize_t
    ^
13. ngx_parse_size(ngx_str_t *line)
14. {

src/core/ngx_parse.c:12:1: Parameter `line->len`
  10. 
  11. 
  12. ssize_t
      ^
  13. ngx_parse_size(ngx_str_t *line)
  14. {

src/core/ngx_parse.c:19:5: Assignment
  17.     ssize_t  size, scale, max;
  18. 
  19.     len = line->len;
          ^
  20. 
  21.     if (len == 0) {

src/core/ngx_parse.c:12:1: <Length trace>
10. 
11. 
12. ssize_t
    ^
13. ngx_parse_size(ngx_str_t *line)
14. {

src/core/ngx_parse.c:12:1: Parameter `*line->data`
  10. 
  11. 
  12. ssize_t
      ^
  13. ngx_parse_size(ngx_str_t *line)
  14. {

src/core/ngx_parse.c:25:12: Array access: Offset: [7, +oo] (⇐ 7 + [0, +oo]) Size: [1, +oo] by call to `ngx_parse_size` 
  23.     }
  24. 
  25.     unit = line->data[len - 1];
                 ^
  26. 
  27.     switch (unit) {
