src/http/ngx_http_request_body.c:454: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_create_temp_file`.

src/http/ngx_http_request_body.c:429:14: Call
427. 
428.     if (rb->temp_file == NULL) {
429.         tf = ngx_pcalloc(r->pool, sizeof(ngx_temp_file_t));
                  ^
430.         if (tf == NULL) {
431.             return NGX_ERROR;

src/core/ngx_palloc.c:304:9: Call
  302.     void *p;
  303. 
  304.     p = ngx_palloc(pool, size);
               ^
  305.     if (p) {
  306.         ngx_memzero(p, size);

src/core/ngx_palloc.c:142:16: Call
    140.         } while (p);
    141. 
    142.         return ngx_palloc_block(pool, size);
                        ^
    143.     }
    144. 

src/core/ngx_palloc.c:188:9: Call
      186.     psize = (size_t) (pool->d.end - (u_char *) pool);
      187. 
      188.     m = ngx_memalign(NGX_POOL_ALIGNMENT, psize, pool->log);
                   ^
      189.     if (m == NULL) {
      190.         return NULL;

src/os/unix/ngx_alloc.c:51:1: Parameter `log->file->fd`
        49. #if (NGX_HAVE_POSIX_MEMALIGN)
        50. 
        51. void *
            ^
        52. ngx_memalign(size_t alignment, size_t size, ngx_log_t *log)
        53. {

src/http/ngx_http_request_body.c:454:17: Call
452.             /* empty body with r->request_body_in_file_only */
453. 
454.             if (ngx_create_temp_file(&tf->file, tf->path, tf->pool,
                     ^
455.                                      tf->persistent, tf->clean, tf->access)
456.                 != NGX_OK)

src/core/ngx_file.c:132:1: Parameter `path->level[*]`
  130. 
  131. 
  132. ngx_int_t
       ^
  133. ngx_create_temp_file(ngx_file_t *file, ngx_path_t *path, ngx_pool_t *pool,
  134.     ngx_uint_t persistent, ngx_uint_t clean, ngx_uint_t access)

src/core/ngx_file.c:214:13: Call
  212.         }
  213. 
  214.         if (ngx_create_path(file, path) == NGX_ERROR) {
                   ^
  215.             return NGX_ERROR;
  216.         }

src/core/ngx_file.c:246:1: <Offset trace>
244. 
245. 
246. ngx_int_t
     ^
247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
248. {

src/core/ngx_file.c:246:1: Parameter `path->level[*]`
    244. 
    245. 
    246. ngx_int_t
         ^
    247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
    248. {

src/core/ngx_file.c:260:9: Assignment
    258.         }
    259. 
    260.         pos += path->level[i] + 1;
                 ^
    261. 
    262.         file->name.data[pos] = '\0';

src/core/ngx_file.c:246:1: <Length trace>
244. 
245. 
246. ngx_int_t
     ^
247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
248. {

src/core/ngx_file.c:246:1: Parameter `*file->name.data`
    244. 
    245. 
    246. ngx_int_t
         ^
    247. ngx_create_path(ngx_file_t *file, ngx_path_t *path)
    248. {

src/core/ngx_file.c:277:9: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_create_temp_file` 
    275.         }
    276. 
    277.         file->name.data[pos] = '/';
                 ^
    278.     }
    279. 
