src/http/modules/ngx_http_chunked_filter_module.c:293: error: Buffer Overrun L3
  Offset: [0, 4] Size: [0, +oo].

src/http/modules/ngx_http_chunked_filter_module.c:239:5: <Length trace>
237.     ngx_table_elt_t  *header;
238. 
239.     len = 0;
         ^
240. 
241.     part = &r->headers_out.trailers.part;

src/http/modules/ngx_http_chunked_filter_module.c:239:5: Assignment
237.     ngx_table_elt_t  *header;
238. 
239.     len = 0;
         ^
240. 
241.     part = &r->headers_out.trailers.part;

src/http/modules/ngx_http_chunked_filter_module.c:282:5: Assignment
280.     }
281. 
282.     len += sizeof(CRLF "0" CRLF CRLF) - 1;
         ^
283. 
284.     b->pos = ngx_palloc(r->pool, len);

src/http/modules/ngx_http_chunked_filter_module.c:284:14: Call
282.     len += sizeof(CRLF "0" CRLF CRLF) - 1;
283. 
284.     b->pos = ngx_palloc(r->pool, len);
                  ^
285.     if (b->pos == NULL) {
286.         return NULL;

src/core/ngx_palloc.c:127:16: Call
  125. #if !(NGX_DEBUG_PALLOC)
  126.     if (size <= pool->max) {
  127.         return ngx_palloc_small(pool, size, 1);
                      ^
  128.     }
  129. #endif

src/core/ngx_palloc.c:157:9: Assignment
    155. 
    156.     do {
    157.         m = p->d.last;
                 ^
    158. 
    159.         if (align) {

src/core/ngx_palloc.c:166:13: Assignment
    164.             p->d.last = m + size;
    165. 
    166.             return m;
                     ^
    167.         }
    168. 

src/core/ngx_palloc.c:127:9: Assignment
  125. #if !(NGX_DEBUG_PALLOC)
  126.     if (size <= pool->max) {
  127.         return ngx_palloc_small(pool, size, 1);
               ^
  128.     }
  129. #endif

src/http/modules/ngx_http_chunked_filter_module.c:284:5: Assignment
282.     len += sizeof(CRLF "0" CRLF CRLF) - 1;
283. 
284.     b->pos = ngx_palloc(r->pool, len);
         ^
285.     if (b->pos == NULL) {
286.         return NULL;

src/http/modules/ngx_http_chunked_filter_module.c:289:5: Assignment
287.     }
288. 
289.     b->last = b->pos;
         ^
290. 
291.     *b->last++ = CR; *b->last++ = LF;

src/http/modules/ngx_http_chunked_filter_module.c:293:22: Array access: Offset: [0, 4] Size: [0, +oo]
291.     *b->last++ = CR; *b->last++ = LF;
292.     *b->last++ = '0';
293.     *b->last++ = CR; *b->last++ = LF;
                          ^
294. 
295.     part = &r->headers_out.trailers.part;
