src/http/modules/ngx_http_proxy_module.c:1312: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_escape_uri`.

src/http/modules/ngx_http_proxy_module.c:1295:5: Assignment
1293.     /* the request line */
1294. 
1295.     b->last = ngx_copy(b->last, method.data, method.len);
          ^
1296.     *b->last++ = ' ';
1297. 

src/http/modules/ngx_http_proxy_module.c:1312:13: Call
1310. 
1311.         if (escape) {
1312.             ngx_escape_uri(b->last, r->uri.data + loc_len,
                  ^
1313.                            r->uri.len - loc_len, NGX_ESCAPE_URI);
1314.             b->last += r->uri.len - loc_len + escape;

src/core/ngx_string.c:1424:1: <Length trace>
1422. 
1423. 
1424. uintptr_t
      ^
1425. ngx_escape_uri(u_char *dst, u_char *src, size_t size, ngx_uint_t type)
1426. {

src/core/ngx_string.c:1424:1: Parameter `*dst`
  1422. 
  1423. 
  1424. uintptr_t
        ^
  1425. ngx_escape_uri(u_char *dst, u_char *src, size_t size, ngx_uint_t type)
  1426. {

src/core/ngx_string.c:1578:14: Assignment
  1576.     while (size) {
  1577.         if (escape[*src >> 5] & (1 << (*src & 0x1f))) {
  1578.             *dst++ = '%';
                     ^
  1579.             *dst++ = hex[*src >> 4];
  1580.             *dst++ = hex[*src & 0xf];

src/core/ngx_string.c:1579:13: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_escape_uri` 
  1577.         if (escape[*src >> 5] & (1 << (*src & 0x1f))) {
  1578.             *dst++ = '%';
  1579.             *dst++ = hex[*src >> 4];
                    ^
  1580.             *dst++ = hex[*src & 0xf];
  1581.             src++;
