src/http/ngx_http_request_body.c:339: error: Buffer Overrun L3
  Offset added: 80 Size: [0, +oo].

src/http/ngx_http_request_body.c:222:22: <Length trace>
220.                 out.next = NULL;
221. 
222.                 rc = ngx_http_request_body_filter(r, &out);
                          ^
223. 
224.                 if (rc != NGX_OK) {

src/http/ngx_http_request_body.c:222:22: Call
220.                 out.next = NULL;
221. 
222.                 rc = ngx_http_request_body_filter(r, &out);
                          ^
223. 
224.                 if (rc != NGX_OK) {

src/http/ngx_http_request_body.c:751:16: Call
  749. {
  750.     if (r->headers_in.chunked) {
  751.         return ngx_http_request_body_chunked_filter(r, in);
                      ^
  752. 
  753.     } else {

src/http/ngx_http_request_body.c:889:22: Call
    887.                 }
    888. 
    889.                 tl = ngx_chain_get_free_buf(r->pool, &rb->free);
                              ^
    890.                 if (tl == NULL) {
    891.                     return NGX_HTTP_INTERNAL_SERVER_ERROR;

src/core/ngx_buf.c:155:1: Parameter `*p->chain->buf`
      153. 
      154. 
      155. ngx_chain_t *
           ^
      156. ngx_chain_get_free_buf(ngx_pool_t *p, ngx_chain_t **free)
      157. {

src/http/ngx_http_request_body.c:889:22: Call
    887.                 }
    888. 
    889.                 tl = ngx_chain_get_free_buf(r->pool, &rb->free);
                              ^
    890.                 if (tl == NULL) {
    891.                     return NGX_HTTP_INTERNAL_SERVER_ERROR;

src/core/ngx_buf.c:155:1: Parameter `*p->chain->buf`
      153. 
      154. 
      155. ngx_chain_t *
           ^
      156. ngx_chain_get_free_buf(ngx_pool_t *p, ngx_chain_t **free)
      157. {

src/http/ngx_http_request_body.c:337:9: Assignment
335.         }
336. 
337.         b = cl->buf;
             ^
338. 
339.         ngx_memzero(b, sizeof(ngx_buf_t));

src/http/ngx_http_request_body.c:339:9: Array access: Offset added: 80 Size: [0, +oo]
337.         b = cl->buf;
338. 
339.         ngx_memzero(b, sizeof(ngx_buf_t));
             ^
340. 
341.         b->in_file = 1;
