src/http/ngx_http_upstream.c:567: error: Integer Overflow L2
  ([0, `r->uri_changes`] - 1):unsigned32 by call to `ngx_http_upstream_connect`.

src/http/ngx_http_upstream.c:447:1: Parameter `r->uri_changes`
445. 
446. 
447. static void
     ^
448. ngx_http_upstream_init_request(ngx_http_request_t *r)
449. {

src/http/ngx_http_upstream.c:567:13: Call
565.             }
566. 
567.             ngx_http_upstream_connect(r, u);
                 ^
568. 
569.             return;

src/http/ngx_http_upstream.c:1085:1: Parameter `r->uri_changes`
  1083. 
  1084. 
  1085. static void
        ^
  1086. ngx_http_upstream_connect(ngx_http_request_t *r, ngx_http_upstream_t *u)
  1087. {

src/http/ngx_http_upstream.c:1228:5: Call
  1226. #endif
  1227. 
  1228.     ngx_http_upstream_send_request(r, u);
            ^
  1229. }
  1230. 

src/http/ngx_http_upstream.c:1370:1: Parameter `r->uri_changes`
    1368. 
    1369. 
    1370. static void
          ^
    1371. ngx_http_upstream_send_request(ngx_http_request_t *r, ngx_http_upstream_t *u)
    1372. {

src/http/ngx_http_upstream.c:1441:9: Call
    1439.          */
    1440. 
    1441.         ngx_http_upstream_process_header(r, u);
                  ^
    1442.         return;
    1443.     }

src/http/ngx_http_upstream.c:1493:1: Parameter `r->uri_changes`
      1491. 
      1492. 
      1493. static void
            ^
      1494. ngx_http_upstream_process_header(ngx_http_request_t *r, ngx_http_upstream_t *u)
      1495. {

src/http/ngx_http_upstream.c:1624:13: Call
      1622.         }
      1623. 
      1624.         if (ngx_http_upstream_test_next(r, u) == NGX_OK) {
                        ^
      1625.             return;
      1626.         }

src/http/ngx_http_upstream.c:1680:1: Parameter `r->uri_changes`
        1678. 
        1679. 
        1680. static ngx_int_t
              ^
        1681. ngx_http_upstream_test_next(ngx_http_request_t *r, ngx_http_upstream_t *u)
        1682. {

src/http/ngx_http_upstream.c:1695:13: Call
        1693. 
        1694.         if (u->peer.tries > 1 && (u->conf->next_upstream & un->mask)) {
        1695.             ngx_http_upstream_next(r, u, un->mask);
                          ^
        1696.             return NGX_OK;
        1697.         }

src/http/ngx_http_upstream.c:2825:1: Parameter `r->uri_changes`
          2823. 
          2824. 
          2825. static void
                ^
          2826. ngx_http_upstream_next(ngx_http_request_t *r, ngx_http_upstream_t *u,
          2827.     ngx_uint_t ft_type)

src/http/ngx_http_upstream.c:2907:26: Call
          2905.                 if (rc == NGX_OK) {
          2906.                     u->cache_status = NGX_HTTP_CACHE_STALE;
          2907.                     rc = ngx_http_upstream_cache_send(r, u);
                                         ^
          2908.                 }
          2909. 

src/http/ngx_http_upstream.c:797:1: Parameter `r->uri_changes`
            795. 
            796. 
            797. static ngx_int_t
                 ^
            798. ngx_http_upstream_cache_send(ngx_http_request_t *r, ngx_http_upstream_t *u)
            799. {

src/http/ngx_http_upstream.c:830:13: Call
            828.     if (rc == NGX_OK) {
            829. 
            830.         if (ngx_http_upstream_process_headers(r, u) != NGX_OK) {
                             ^
            831.             return NGX_DONE;
            832.         }

src/http/ngx_http_upstream.c:1841:1: Parameter `r->uri_changes`
              1839. 
              1840. 
              1841. static ngx_int_t
                    ^
              1842. ngx_http_upstream_process_headers(ngx_http_request_t *r, ngx_http_upstream_t *u)
              1843. {

src/http/ngx_http_upstream.c:1856:9: Call
              1854.         && !(u->conf->ignore_headers & NGX_HTTP_UPSTREAM_IGN_XA_REDIRECT))
              1855.     {
              1856.         ngx_http_upstream_finalize_request(r, u, NGX_DECLINED);
                            ^
              1857. 
              1858.         part = &u->headers_in.headers.part;

src/http/ngx_http_upstream.c:2974:1: Parameter `r->uri_changes`
                2972. 
                2973. 
                2974. static void
                      ^
                2975. ngx_http_upstream_finalize_request(ngx_http_request_t *r,
                2976.     ngx_http_upstream_t *u, ngx_int_t rc)

src/http/ngx_http_upstream.c:3093:5: Call
                3091.     }
                3092. 
                3093.     ngx_http_finalize_request(r, rc);
                          ^
                3094. }
                3095. 

src/http/ngx_http_request.c:1882:1: Parameter `r->uri_changes`
                  1880. 
                  1881. 
                  1882. void
                        ^
                  1883. ngx_http_finalize_request(ngx_http_request_t *r, ngx_int_t rc)
                  1884. {

src/http/ngx_http_request.c:1921:13: Call
                  1919.         || c->error)
                  1920.     {
                  1921.         if (ngx_http_post_action(r) == NGX_OK) {
                                    ^
                  1922.             return;
                  1923.         }

src/http/ngx_http_request.c:2889:1: Parameter `r->uri_changes`
                    2887. 
                    2888. 
                    2889. static ngx_int_t
                          ^
                    2890. ngx_http_post_action(ngx_http_request_t *r)
                    2891. {

src/http/ngx_http_request.c:2912:9: Call
                    2910. 
                    2911.     if (clcf->post_action.data[0] == '/') {
                    2912.         ngx_http_internal_redirect(r, &clcf->post_action, NULL);
                                  ^
                    2913. 
                    2914.     } else {

src/http/ngx_http_core_module.c:2463:1: <LHS trace>
2461. 
2462. 
2463. ngx_int_t
      ^
2464. ngx_http_internal_redirect(ngx_http_request_t *r,
2465.     ngx_str_t *uri, ngx_str_t *args)

src/http/ngx_http_core_module.c:2463:1: Parameter `r->uri_changes`
                      2461. 
                      2462. 
                      2463. ngx_int_t
                            ^
                      2464. ngx_http_internal_redirect(ngx_http_request_t *r,
                      2465.     ngx_str_t *uri, ngx_str_t *args)

src/http/ngx_http_core_module.c:2469:5: Binary operation: ([0, r->uri_changes] - 1):unsigned32 by call to `ngx_http_upstream_connect` 
                      2467.     ngx_http_core_srv_conf_t  *cscf;
                      2468. 
                      2469.     r->uri_changes--;
                                ^
                      2470. 
                      2471.     if (r->uri_changes == 0) {
