src/http/modules/ngx_http_scgi_module.c:1490: error: Buffer Overrun L3
  Offset: [0, 535] (⇐ [0, 24] + [0, 511]) Size: [0, 4120] by call to `ngx_http_upstream_hide_headers_hash`.

src/http/modules/ngx_http_scgi_module.c:1486:5: Assignment
1484.                          prev->upstream.intercept_errors, 0);
1485. 
1486.     hash.max_size = 512;
          ^
1487.     hash.bucket_size = ngx_align(64, ngx_cacheline_size);
1488.     hash.name = "scgi_hide_headers_hash";

src/http/modules/ngx_http_scgi_module.c:1490:9: Call
1488.     hash.name = "scgi_hide_headers_hash";
1489. 
1490.     if (ngx_http_upstream_hide_headers_hash(cf, &conf->upstream,
              ^
1491.             &prev->upstream, ngx_http_scgi_hide_headers, &hash)
1492.         != NGX_OK)

src/http/ngx_http_upstream.c:5607:1: Parameter `hash->max_size`
  5605. 
  5606. 
  5607. ngx_int_t
        ^
  5608. ngx_http_upstream_hide_headers_hash(ngx_conf_t *cf,
  5609.     ngx_http_upstream_conf_t *conf, ngx_http_upstream_conf_t *prev,

src/http/ngx_http_upstream.c:5715:12: Call
  5713.     hash->temp_pool = NULL;
  5714. 
  5715.     return ngx_hash_init(hash, hide_headers.elts, hide_headers.nelts);
                   ^
  5716. }
  5717. 

src/core/ngx_hash.c:251:1: <Offset trace>
249.     (sizeof(void *) + ngx_align((name)->key.len + 2, sizeof(void *)))
250. 
251. ngx_int_t
     ^
252. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
253. {

src/core/ngx_hash.c:251:1: Parameter `hinit->max_size`
    249.     (sizeof(void *) + ngx_align((name)->key.len + 2, sizeof(void *)))
    250. 
    251. ngx_int_t
         ^
    252. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
    253. {

src/core/ngx_hash.c:251:1: <Length trace>
249.     (sizeof(void *) + ngx_align((name)->key.len + 2, sizeof(void *)))
250. 
251. ngx_int_t
     ^
252. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
253. {

src/core/ngx_hash.c:251:1: Parameter `hinit->max_size`
    249.     (sizeof(void *) + ngx_align((name)->key.len + 2, sizeof(void *)))
    250. 
    251. ngx_int_t
         ^
    252. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
    253. {

src/core/ngx_hash.c:363:19: Call
    361. 
    362.     } else {
    363.         buckets = ngx_pcalloc(hinit->pool, size * sizeof(ngx_hash_elt_t *));
                           ^
    364.         if (buckets == NULL) {
    365.             ngx_free(test);

src/core/ngx_palloc.c:299:1: Parameter `size`
      297. 
      298. 
      299. void *
           ^
      300. ngx_pcalloc(ngx_pool_t *pool, size_t size)
      301. {

src/core/ngx_palloc.c:304:9: Call
      302.     void *p;
      303. 
      304.     p = ngx_palloc(pool, size);
                   ^
      305.     if (p) {
      306.         ngx_memzero(p, size);

src/core/ngx_palloc.c:130:13: Assignment
        128. 
        129.         do {
        130.             m = ngx_align_ptr(p->d.last, NGX_ALIGNMENT);
                         ^
        131. 
        132.             if ((size_t) (p->d.end - m) >= size) {

src/core/ngx_palloc.c:135:17: Assignment
        133.                 p->d.last = m + size;
        134. 
        135.                 return m;
                             ^
        136.             }
        137. 

src/core/ngx_palloc.c:304:5: Assignment
      302.     void *p;
      303. 
      304.     p = ngx_palloc(pool, size);
               ^
      305.     if (p) {
      306.         ngx_memzero(p, size);

src/core/ngx_palloc.c:309:5: Assignment
      307.     }
      308. 
      309.     return p;
               ^
      310. }
      311. 

src/core/ngx_hash.c:363:9: Assignment
    361. 
    362.     } else {
    363.         buckets = ngx_pcalloc(hinit->pool, size * sizeof(ngx_hash_elt_t *));
                 ^
    364.         if (buckets == NULL) {
    365.             ngx_free(test);

src/core/ngx_hash.c:383:9: Array access: Offset: [0, 535] (⇐ [0, 24] + [0, 511]) Size: [0, 4120] by call to `ngx_http_upstream_hide_headers_hash` 
    381.         }
    382. 
    383.         buckets[i] = (ngx_hash_elt_t *) elts;
                 ^
    384.         elts += test[i];
    385. 
