modules/aaa/mod_authz_host.c:198: error: BUFFER_OVERRUN_L1
  Offset: [1, +oo] Size: 1 by call to `ap_getword_conf`.

modules/aaa/mod_authz_host.c:186:19: Call
184.         const char *require;
185. 
186.         require = ap_expr_str_exec(r, expr, &err);
                       ^
187.         if (err) {
188.             ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02593)

server/util_expr_eval.c:932:1: Parameter `*info->root_node->node_arg1`
  930. }
  931. 
  932. AP_DECLARE(const char *) ap_expr_str_exec(request_rec *r,
       ^
  933.                                           const ap_expr_info_t *info,
  934.                                           const char **err)

server/util_expr_eval.c:936:12: Call
  934.                                           const char **err)
  935. {
  936.     return ap_expr_str_exec_re(r, info, 0, NULL, NULL, err);
                  ^
  937. }
  938. 

server/util_expr_eval.c:925:9: Assignment
    923.         return result;
    924.     else if (rc < 0)
    925.         return NULL;
                 ^
    926.     else
    927.         ap_assert(0);

server/util_expr_eval.c:936:5: Assignment
  934.                                           const char **err)
  935. {
  936.     return ap_expr_str_exec_re(r, info, 0, NULL, NULL, err);
           ^
  937. }
  938. 

modules/aaa/mod_authz_host.c:186:9: Assignment
184.         const char *require;
185. 
186.         require = ap_expr_str_exec(r, expr, &err);
             ^
187.         if (err) {
188.             ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r, APLOGNO(02593)

modules/aaa/mod_authz_host.c:197:9: Assignment
195.             host names to check rather than a single name.  This is different
196.             from the previous host based syntax. */
197.         t = require;
             ^
198.         while ((w = ap_getword_conf(r->pool, &t)) && w[0]) {
199.             if (in_domain(w, remotehost)) {

modules/aaa/mod_authz_host.c:198:21: Call
196.             from the previous host based syntax. */
197.         t = require;
198.         while ((w = ap_getword_conf(r->pool, &t)) && w[0]) {
                         ^
199.             if (in_domain(w, remotehost)) {
200.                 return AUTHZ_GRANTED;

server/util.c:781:1: <Length trace>
779. }
780. 
781. AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line)
     ^
782. {
783.     const char *str = *line, *strend;

server/util.c:781:1: Parameter `**line`
  779. }
  780. 
  781. AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line)
       ^
  782. {
  783.     const char *str = *line, *strend;

server/util.c:783:5: Assignment
  781. AP_DECLARE(char *) ap_getword_conf(apr_pool_t *p, const char **line)
  782. {
  783.     const char *str = *line, *strend;
           ^
  784.     char *res;
  785.     char quote;

server/util.c:796:9: Assignment
  794. 
  795.     if ((quote = *str) == '"' || quote == '\'') {
  796.         strend = str + 1;
               ^
  797.         while (*strend && *strend != quote) {
  798.             if (*strend == '\\' && strend[1] &&

server/util.c:797:16: Array access: Offset: [1, +oo] Size: 1 by call to `ap_getword_conf` 
  795.     if ((quote = *str) == '"' || quote == '\'') {
  796.         strend = str + 1;
  797.         while (*strend && *strend != quote) {
                      ^
  798.             if (*strend == '\\' && strend[1] &&
  799.                 (strend[1] == quote || strend[1] == '\\')) {
