src/http/modules/ngx_http_log_module.c:1199: error: Buffer Overrun L3
  Offset: [6, +oo] (⇐ 7 + [-1, +oo]) Size: [1, +oo] by call to `ngx_parse_size`.

src/http/modules/ngx_http_log_module.c:1128:9: Call
1126.     ngx_memzero(log, sizeof(ngx_http_log_t));
1127. 
1128.     n = ngx_http_script_variables_count(&value[1]);
              ^
1129. 
1130.     if (n == 0) {

src/http/ngx_http_script.c:317:1: Parameter `value->len`
  315. 
  316. 
  317. ngx_uint_t
       ^
  318. ngx_http_script_variables_count(ngx_str_t *value)
  319. {

src/http/modules/ngx_http_log_module.c:1131:21: Call
1129. 
1130.     if (n == 0) {
1131.         log->file = ngx_conf_open_file(cf->cycle, &value[1]);
                          ^
1132.         if (log->file == NULL) {
1133.             return NGX_CONF_ERROR;

src/core/ngx_conf_file.c:891:1: Parameter `name->len`
  889. 
  890. 
  891. ngx_open_file_t *
       ^
  892. ngx_conf_open_file(ngx_cycle_t *cycle, ngx_str_t *name)
  893. {

src/http/modules/ngx_http_log_module.c:1196:13: Assignment
1194. 
1195.         if (ngx_strncmp(value[i].data, "buffer=", 7) == 0) {
1196.             s.len = value[i].len - 7;
                  ^
1197.             s.data = value[i].data + 7;
1198. 

src/http/modules/ngx_http_log_module.c:1199:20: Call
1197.             s.data = value[i].data + 7;
1198. 
1199.             size = ngx_parse_size(&s);
                         ^
1200. 
1201.             if (size == NGX_ERROR || size == 0) {

src/core/ngx_parse.c:12:1: <Offset trace>
10. 
11. 
12. ssize_t
    ^
13. ngx_parse_size(ngx_str_t *line)
14. {

src/core/ngx_parse.c:12:1: Parameter `line->len`
  10. 
  11. 
  12. ssize_t
      ^
  13. ngx_parse_size(ngx_str_t *line)
  14. {

src/core/ngx_parse.c:20:5: Assignment
  18.     ngx_int_t  scale;
  19. 
  20.     len = line->len;
          ^
  21.     unit = line->data[len - 1];
  22. 

src/core/ngx_parse.c:12:1: <Length trace>
10. 
11. 
12. ssize_t
    ^
13. ngx_parse_size(ngx_str_t *line)
14. {

src/core/ngx_parse.c:12:1: Parameter `*line->data`
  10. 
  11. 
  12. ssize_t
      ^
  13. ngx_parse_size(ngx_str_t *line)
  14. {

src/core/ngx_parse.c:21:12: Array access: Offset: [6, +oo] (⇐ 7 + [-1, +oo]) Size: [1, +oo] by call to `ngx_parse_size` 
  19. 
  20.     len = line->len;
  21.     unit = line->data[len - 1];
                 ^
  22. 
  23.     switch (unit) {
