src/http/ngx_http_request_body.c:140: error: Buffer Overrun L3
  Offset added: 80 Size: [0, +oo].

src/http/ngx_http_request_body.c:93:14: <Length trace>
91.         out.next = NULL;
92. 
93.         rc = ngx_http_request_body_filter(r, &out);
                 ^
94. 
95.         if (rc != NGX_OK) {

src/http/ngx_http_request_body.c:93:14: Call
91.         out.next = NULL;
92. 
93.         rc = ngx_http_request_body_filter(r, &out);
                 ^
94. 
95.         if (rc != NGX_OK) {

src/http/ngx_http_request_body.c:787:16: Call
  785. {
  786.     if (r->headers_in.chunked) {
  787.         return ngx_http_request_body_chunked_filter(r, in);
                      ^
  788. 
  789.     } else {

src/http/ngx_http_request_body.c:925:22: Call
    923.                 }
    924. 
    925.                 tl = ngx_chain_get_free_buf(r->pool, &rb->free);
                              ^
    926.                 if (tl == NULL) {
    927.                     return NGX_HTTP_INTERNAL_SERVER_ERROR;

src/core/ngx_buf.c:155:1: Parameter `*p->chain->buf`
      153. 
      154. 
      155. ngx_chain_t *
           ^
      156. ngx_chain_get_free_buf(ngx_pool_t *p, ngx_chain_t **free)
      157. {

src/http/ngx_http_request_body.c:925:22: Call
    923.                 }
    924. 
    925.                 tl = ngx_chain_get_free_buf(r->pool, &rb->free);
                              ^
    926.                 if (tl == NULL) {
    927.                     return NGX_HTTP_INTERNAL_SERVER_ERROR;

src/core/ngx_buf.c:155:1: Parameter `*p->chain->buf`
      153. 
      154. 
      155. ngx_chain_t *
           ^
      156. ngx_chain_get_free_buf(ngx_pool_t *p, ngx_chain_t **free)
      157. {

src/http/ngx_http_request_body.c:138:13: Assignment
136.             }
137. 
138.             b = cl->buf;
                 ^
139. 
140.             ngx_memzero(b, sizeof(ngx_buf_t));

src/http/ngx_http_request_body.c:140:13: Array access: Offset added: 80 Size: [0, +oo]
138.             b = cl->buf;
139. 
140.             ngx_memzero(b, sizeof(ngx_buf_t));
                 ^
141. 
142.             b->in_file = 1;
