src/http/modules/ngx_http_fastcgi_module.c:2090: error: Buffer Overrun L3
  Offset: [0, 534] (⇐ [0, 24] + [0, 510]) Size: [0, +oo] by call to `ngx_http_upstream_hide_headers_hash`.

src/http/modules/ngx_http_fastcgi_module.c:2086:5: Assignment
2084.     ngx_conf_merge_str_value(conf->index, prev->index, "");
2085. 
2086.     hash.max_size = 512;
          ^
2087.     hash.bucket_size = ngx_align(64, ngx_cacheline_size);
2088.     hash.name = "fastcgi_hide_headers_hash";

src/http/modules/ngx_http_fastcgi_module.c:2090:9: Call
2088.     hash.name = "fastcgi_hide_headers_hash";
2089. 
2090.     if (ngx_http_upstream_hide_headers_hash(cf, &conf->upstream,
              ^
2091.                                             &prev->upstream,
2092.                                             ngx_http_fastcgi_hide_headers,

src/http/ngx_http_upstream.c:4012:1: Parameter `hash->max_size`
  4010. 
  4011. 
  4012. ngx_int_t
        ^
  4013. ngx_http_upstream_hide_headers_hash(ngx_conf_t *cf,
  4014.     ngx_http_upstream_conf_t *conf, ngx_http_upstream_conf_t *prev,

src/http/ngx_http_upstream.c:4115:12: Call
  4113.     hash->temp_pool = NULL;
  4114. 
  4115.     return ngx_hash_init(hash, hide_headers.elts, hide_headers.nelts);
                   ^
  4116. }
  4117. 

src/core/ngx_hash.c:250:1: <Offset trace>
248.     (sizeof(void *) + ngx_align((name)->key.len + 1, sizeof(void *)))
249. 
250. ngx_int_t
     ^
251. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
252. {

src/core/ngx_hash.c:250:1: Parameter `hinit->max_size`
    248.     (sizeof(void *) + ngx_align((name)->key.len + 1, sizeof(void *)))
    249. 
    250. ngx_int_t
         ^
    251. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
    252. {

src/core/ngx_hash.c:250:1: <Length trace>
248.     (sizeof(void *) + ngx_align((name)->key.len + 1, sizeof(void *)))
249. 
250. ngx_int_t
     ^
251. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
252. {

src/core/ngx_hash.c:250:1: Parameter `hinit->max_size`
    248.     (sizeof(void *) + ngx_align((name)->key.len + 1, sizeof(void *)))
    249. 
    250. ngx_int_t
         ^
    251. ngx_hash_init(ngx_hash_init_t *hinit, ngx_hash_key_t *names, ngx_uint_t nelts)
    252. {

src/core/ngx_hash.c:371:19: Call
    369. 
    370.     } else {
    371.         buckets = ngx_pcalloc(hinit->pool, size * sizeof(ngx_hash_elt_t *));
                           ^
    372.         if (buckets == NULL) {
    373.             ngx_free(test);

src/core/ngx_palloc.c:283:1: Parameter `size`
      281. 
      282. 
      283. void *
           ^
      284. ngx_pcalloc(ngx_pool_t *pool, size_t size)
      285. {

src/core/ngx_palloc.c:288:9: Call
      286.     void *p;
      287. 
      288.     p = ngx_palloc(pool, size);
                   ^
      289.     if (p) {
      290.         ngx_memzero(p, size);

src/core/ngx_palloc.c:125:13: Assignment
        123. 
        124.         do {
        125.             m = ngx_align_ptr(p->d.last, NGX_ALIGNMENT);
                         ^
        126. 
        127.             if ((size_t) (p->d.end - m) >= size) {

src/core/ngx_palloc.c:130:17: Assignment
        128.                 p->d.last = m + size;
        129. 
        130.                 return m;
                             ^
        131.             }
        132. 

src/core/ngx_palloc.c:288:5: Assignment
      286.     void *p;
      287. 
      288.     p = ngx_palloc(pool, size);
               ^
      289.     if (p) {
      290.         ngx_memzero(p, size);

src/core/ngx_palloc.c:293:5: Assignment
      291.     }
      292. 
      293.     return p;
               ^
      294. }
      295. 

src/core/ngx_hash.c:371:9: Assignment
    369. 
    370.     } else {
    371.         buckets = ngx_pcalloc(hinit->pool, size * sizeof(ngx_hash_elt_t *));
                 ^
    372.         if (buckets == NULL) {
    373.             ngx_free(test);

src/core/ngx_hash.c:391:9: Array access: Offset: [0, 534] (⇐ [0, 24] + [0, 510]) Size: [0, +oo] by call to `ngx_http_upstream_hide_headers_hash` 
    389.         }
    390. 
    391.         buckets[i] = (ngx_hash_elt_t *) elts;
                 ^
    392.         elts += test[i];
    393. 
