src/http/ngx_http_upstream.c:5904: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_parse_addr_port`.

src/http/ngx_http_upstream.c:5891:9: Call
5889.     }
5890. 
5891.     if (ngx_http_complex_value(r, local->value, &val) != NGX_OK) {
              ^
5892.         return NGX_ERROR;
5893.     }

src/http/ngx_http_script.c:57:1: Parameter `*value->data`
  55. 
  56. 
  57. ngx_int_t
      ^
  58. ngx_http_complex_value(ngx_http_request_t *r, ngx_http_complex_value_t *val,
  59.     ngx_str_t *value)

src/http/ngx_http_upstream.c:5904:10: Call
5902.     }
5903. 
5904.     rc = ngx_parse_addr_port(r->pool, addr, val.data, val.len);
               ^
5905.     if (rc == NGX_ERROR) {
5906.         return NGX_ERROR;

src/core/ngx_inet.c:528:1: Parameter `*text`
  526. 
  527. 
  528. ngx_int_t
       ^
  529. ngx_parse_addr_port(ngx_pool_t *pool, ngx_addr_t *addr, u_char *text,
  530.     size_t len)

src/core/ngx_inet.c:560:13: Call
  558. 
  559.     {
  560.         p = ngx_strlchr(text, last, ':');
                   ^
  561. 
  562.         if (p == NULL) {

src/core/ngx_string.h:77:5: Assignment
    75.     }
    76. 
    77.     return NULL;
            ^
    78. }
    79. 

src/core/ngx_inet.c:560:9: Assignment
  558. 
  559.     {
  560.         p = ngx_strlchr(text, last, ':');
               ^
  561. 
  562.         if (p == NULL) {

src/core/ngx_inet.c:567:5: Assignment
  565.     }
  566. 
  567.     p++;
           ^
  568.     plen = last - p;
  569. 

src/core/ngx_inet.c:570:12: Call
  568.     plen = last - p;
  569. 
  570.     port = ngx_atoi(p, plen);
                  ^
  571. 
  572.     if (port < 1 || port > 65535) {

src/core/ngx_string.c:901:1: <Length trace>
899. 
900. 
901. ngx_int_t
     ^
902. ngx_atoi(u_char *line, size_t n)
903. {

src/core/ngx_string.c:901:1: Parameter `*line`
    899. 
    900. 
    901. ngx_int_t
         ^
    902. ngx_atoi(u_char *line, size_t n)
    903. {

src/core/ngx_string.c:914:13: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_parse_addr_port` 
    912. 
    913.     for (value = 0; n--; line++) {
    914.         if (*line < '0' || *line > '9') {
                     ^
    915.             return NGX_ERROR;
    916.         }
