src/http/ngx_http_upstream.c:5944: error: Buffer Overrun L3
  Offset: [1, +oo] (⇐ [0, +oo] + 1) Size: [0, +oo] by call to `ngx_parse_addr_port`.

src/http/ngx_http_upstream.c:5931:9: Call
5929.     }
5930. 
5931.     if (ngx_http_complex_value(r, local->value, &val) != NGX_OK) {
              ^
5932.         return NGX_ERROR;
5933.     }

src/http/ngx_http_script.c:57:1: Parameter `*value->data`
  55. 
  56. 
  57. ngx_int_t
      ^
  58. ngx_http_complex_value(ngx_http_request_t *r, ngx_http_complex_value_t *val,
  59.     ngx_str_t *value)

src/http/ngx_http_upstream.c:5944:10: Call
5942.     }
5943. 
5944.     rc = ngx_parse_addr_port(r->pool, addr, val.data, val.len);
               ^
5945.     if (rc == NGX_ERROR) {
5946.         return NGX_ERROR;

src/core/ngx_inet.c:615:1: <Length trace>
613. 
614. 
615. ngx_int_t
     ^
616. ngx_parse_addr_port(ngx_pool_t *pool, ngx_addr_t *addr, u_char *text,
617.     size_t len)

src/core/ngx_inet.c:615:1: Parameter `len`
  613. 
  614. 
  615. ngx_int_t
       ^
  616. ngx_parse_addr_port(ngx_pool_t *pool, ngx_addr_t *addr, u_char *text,
  617.     size_t len)

src/core/ngx_inet.c:629:5: Assignment
  627.     }
  628. 
  629.     last = text + len;
           ^
  630. 
  631. #if (NGX_HAVE_INET6)

src/core/ngx_inet.c:636:43: Array access: Offset: [1, +oo] (⇐ [0, +oo] + 1) Size: [0, +oo] by call to `ngx_parse_addr_port` 
  634.         p = ngx_strlchr(text, last, ']');
  635. 
  636.         if (p == NULL || p == last - 1 || *++p != ':') {
                                                 ^
  637.             return NGX_DECLINED;
  638.         }
