src/http/ngx_http_request_body.c:393: error: Buffer Overrun L3
  Offset added: 80 Size: [0, +oo].

src/http/ngx_http_request_body.c:274:22: <Length trace>
272.                 out.next = NULL;
273. 
274.                 rc = ngx_http_request_body_filter(r, &out);
                          ^
275. 
276.                 if (rc != NGX_OK) {

src/http/ngx_http_request_body.c:274:22: Call
272.                 out.next = NULL;
273. 
274.                 rc = ngx_http_request_body_filter(r, &out);
                          ^
275. 
276.                 if (rc != NGX_OK) {

src/http/ngx_http_request_body.c:827:16: Call
  825. {
  826.     if (r->headers_in.chunked) {
  827.         return ngx_http_request_body_chunked_filter(r, in);
                      ^
  828. 
  829.     } else {

src/http/ngx_http_request_body.c:969:22: Call
    967.                 }
    968. 
    969.                 tl = ngx_chain_get_free_buf(r->pool, &rb->free);
                              ^
    970.                 if (tl == NULL) {
    971.                     return NGX_HTTP_INTERNAL_SERVER_ERROR;

src/core/ngx_buf.c:155:1: Parameter `*p->chain->buf`
      153. 
      154. 
      155. ngx_chain_t *
           ^
      156. ngx_chain_get_free_buf(ngx_pool_t *p, ngx_chain_t **free)
      157. {

src/http/ngx_http_request_body.c:969:22: Call
    967.                 }
    968. 
    969.                 tl = ngx_chain_get_free_buf(r->pool, &rb->free);
                              ^
    970.                 if (tl == NULL) {
    971.                     return NGX_HTTP_INTERNAL_SERVER_ERROR;

src/core/ngx_buf.c:155:1: Parameter `*p->chain->buf`
      153. 
      154. 
      155. ngx_chain_t *
           ^
      156. ngx_chain_get_free_buf(ngx_pool_t *p, ngx_chain_t **free)
      157. {

src/http/ngx_http_request_body.c:391:13: Assignment
389.             }
390. 
391.             b = cl->buf;
                 ^
392. 
393.             ngx_memzero(b, sizeof(ngx_buf_t));

src/http/ngx_http_request_body.c:393:13: Array access: Offset added: 80 Size: [0, +oo]
391.             b = cl->buf;
392. 
393.             ngx_memzero(b, sizeof(ngx_buf_t));
                 ^
394. 
395.             b->in_file = 1;
