src/core/ngx_file.c:70: error: Buffer Overrun L2
  Offset: [`path->len` + `path->name.len` + 1, `path->len` + `path->name.len` + 65536] Size: [`path->len` + `path->name.len` + 12, `path->len` + `path->name.len` + 12] by call to `ngx_sprintf`.

src/core/ngx_file.c:38:1: Parameter `path->len`
36. 
37. 
38. ngx_int_t
    ^
39. ngx_create_temp_file(ngx_file_t *file, ngx_path_t *path, ngx_pool_t *pool,
40.     ngx_uint_t persistent, ngx_uint_t clean, ngx_uint_t access)

src/core/ngx_file.c:70:16: Call
68. 
69.     for ( ;; ) {
70.         (void) ngx_sprintf(file->name.data + path->name.len + 1 + path->len,
                   ^
71.                            "%010uD%Z", n);
72. 

src/core/ngx_string.c:95:1: Parameter `*buf`
  93. 
  94. 
  95. u_char * ngx_cdecl
      ^
  96. ngx_sprintf(u_char *buf, const char *fmt, ...)
  97. {

src/core/ngx_string.c:102:9: Call
  100. 
  101.     va_start(args, fmt);
  102.     p = ngx_vsnprintf(buf, /* STUB */ 65536, fmt, args);
               ^
  103.     va_end(args);
  104. 

src/core/ngx_string.c:123:1: <Length trace>
121. 
122. 
123. u_char *
     ^
124. ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
125. {

src/core/ngx_string.c:123:1: Parameter `*buf`
    121. 
    122. 
    123. u_char *
         ^
    124. ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
    125. {

src/core/ngx_string.c:244:25: Array access: Offset: [path->len + path->name.len + 1, path->len + path->name.len + 65536] Size: [path->len + path->name.len + 12, path->len + path->name.len + 12] by call to `ngx_sprintf` 
    242.                 if (slen == (size_t) -1) {
    243.                     while (*p && buf < last) {
    244.                         *buf++ = *p++;
                                 ^
    245.                     }
    246. 
