src/http/ngx_http_request.c:1110: error: Buffer Overrun L3
  Offset: [2, +oo] Size: [0, +oo] by call to `ngx_http_process_request_header`.

src/http/ngx_http_request.c:1108:13: Assignment
1106.             r->request_length += r->header_in->pos - r->header_in->start;
1107. 
1108.             r->http_state = NGX_HTTP_PROCESS_REQUEST_STATE;
                  ^
1109. 
1110.             rc = ngx_http_process_request_header(r);

src/http/ngx_http_request.c:1110:18: Call
1108.             r->http_state = NGX_HTTP_PROCESS_REQUEST_STATE;
1109. 
1110.             rc = ngx_http_process_request_header(r);
                       ^
1111. 
1112.             if (rc != NGX_OK) {

src/http/ngx_http_request.c:1530:1: Parameter `r->http_connection->nfree`
  1528. 
  1529. 
  1530. static ngx_int_t
        ^
  1531. ngx_http_process_request_header(ngx_http_request_t *r)
  1532. {

src/http/ngx_http_request.c:1537:9: Call
  1535.         == NGX_ERROR)
  1536.     {
  1537.         ngx_http_finalize_request(r, NGX_HTTP_INTERNAL_SERVER_ERROR);
                ^
  1538.         return NGX_ERROR;
  1539.     }

src/http/ngx_http_request.c:1916:1: Parameter `r->http_connection->nfree`
    1914. 
    1915. 
    1916. void
          ^
    1917. ngx_http_finalize_request(ngx_http_request_t *r, ngx_int_t rc)
    1918. {

src/http/ngx_http_request.c:1936:9: Call
    1934.     if (rc == NGX_OK && r->filter_finalize) {
    1935.         c->error = 1;
    1936.         ngx_http_finalize_connection(r);
                  ^
    1937.         return;
    1938.     }

src/http/ngx_http_request.c:2167:1: Parameter `r->http_connection->nfree`
      2165. 
      2166. 
      2167. static void
            ^
      2168. ngx_http_finalize_connection(ngx_http_request_t *r)
      2169. {

src/http/ngx_http_request.c:2195:9: Call
      2193.          && clcf->keepalive_timeout > 0)
      2194.     {
      2195.         ngx_http_set_keepalive(r);
                    ^
      2196.         return;
      2197.     }

src/http/ngx_http_request.c:2434:1: <Offset trace>
2432. 
2433. 
2434. static void
      ^
2435. ngx_http_set_keepalive(ngx_http_request_t *r)
2436. {

src/http/ngx_http_request.c:2434:1: Parameter `r->http_connection->nfree`
        2432. 
        2433. 
        2434. static void
              ^
        2435. ngx_http_set_keepalive(ngx_http_request_t *r)
        2436. {

src/http/ngx_http_request.c:2434:1: <Length trace>
2432. 
2433. 
2434. static void
      ^
2435. ngx_http_set_keepalive(ngx_http_request_t *r)
2436. {

src/http/ngx_http_request.c:2434:1: Parameter `*r->http_connection->free`
        2432. 
        2433. 
        2434. static void
              ^
        2435. ngx_http_set_keepalive(ngx_http_request_t *r)
        2436. {

src/http/ngx_http_request.c:2493:17: Array access: Offset: [2, +oo] Size: [0, +oo] by call to `ngx_http_process_request_header` 
        2491.             for (i = 0; i < hc->nbusy - 1; i++) {
        2492.                 f = hc->busy[i];
        2493.                 hc->free[hc->nfree++] = f;
                              ^
        2494.                 f->pos = f->start;
        2495.                 f->last = f->start;
