src/http/modules/ngx_http_scgi_module.c:461: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_parse_url`.

src/http/modules/ngx_http_scgi_module.c:452:9: Call
450.     ngx_memzero(&url, sizeof(ngx_url_t));
451. 
452.     if (ngx_http_script_run(r, &url.url, scf->scgi_lengths->elts, 0,
             ^
453.                             scf->scgi_values->elts)
454.         == NULL)

src/http/ngx_http_script.c:488:1: Parameter `len`
  486. 
  487. 
  488. u_char *
       ^
  489. ngx_http_script_run(ngx_http_request_t *r, ngx_str_t *value,
  490.     void *code_lengths, size_t len, void *code_values)

src/http/ngx_http_script.c:520:19: Call
  518. 
  519.     value->len = len;
  520.     value->data = ngx_pnalloc(r->pool, len);
                         ^
  521.     if (value->data == NULL) {
  522.         return NULL;

src/core/ngx_palloc.c:156:13: Assignment
    154. 
    155.         do {
    156.             m = p->d.last;
                     ^
    157. 
    158.             if ((size_t) (p->d.end - m) >= size) {

src/core/ngx_palloc.c:161:17: Assignment
    159.                 p->d.last = m + size;
    160. 
    161.                 return m;
                         ^
    162.             }
    163. 

src/http/ngx_http_script.c:520:5: Assignment
  518. 
  519.     value->len = len;
  520.     value->data = ngx_pnalloc(r->pool, len);
           ^
  521.     if (value->data == NULL) {
  522.         return NULL;

src/http/modules/ngx_http_scgi_module.c:461:9: Call
459.     url.no_resolve = 1;
460. 
461.     if (ngx_parse_url(r->pool, &url) != NGX_OK) {
             ^
462.         if (url.err) {
463.             ngx_log_error(NGX_LOG_ERR, r->connection->log, 0,

src/core/ngx_inet.c:510:1: Parameter `*u->url.data`
  508. 
  509. 
  510. ngx_int_t
       ^
  511. ngx_parse_url(ngx_pool_t *pool, ngx_url_t *u)
  512. {

src/core/ngx_inet.c:530:12: Call
  528.     }
  529. 
  530.     return ngx_parse_inet_url(pool, u);
                  ^
  531. }
  532. 

src/core/ngx_inet.c:658:13: Assignment
    656. 
    657.         if (uri < port) {
    658.             port = NULL;
                     ^
    659.         }
    660.     }

src/core/ngx_inet.c:663:9: Assignment
    661. 
    662.     if (port) {
    663.         port++;
                 ^
    664. 
    665.         len = last - port;

src/core/ngx_inet.c:672:13: Call
    670.         }
    671. 
    672.         n = ngx_atoi(port, len);
                     ^
    673. 
    674.         if (n < 1 || n > 65535) {

src/core/ngx_string.c:851:1: <Length trace>
849. 
850. 
851. ngx_int_t
     ^
852. ngx_atoi(u_char *line, size_t n)
853. {

src/core/ngx_string.c:851:1: Parameter `*line`
      849. 
      850. 
      851. ngx_int_t
           ^
      852. ngx_atoi(u_char *line, size_t n)
      853. {

src/core/ngx_string.c:861:13: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_parse_url` 
      859. 
      860.     for (value = 0; n--; line++) {
      861.         if (*line < '0' || *line > '9') {
                       ^
      862.             return NGX_ERROR;
      863.         }
