src/core/ngx_crypt.c:229: error: Buffer Overrun L3
  Offset added: 6 Size: [0, +oo].

src/core/ngx_crypt.c:211:5: <Length trace>
209.     }
210. 
211.     ngx_decode_base64(&decoded, &encoded);
         ^
212. 
213.     /* update SHA1 from key and salt */

src/core/ngx_crypt.c:211:5: Call
209.     }
210. 
211.     ngx_decode_base64(&decoded, &encoded);
         ^
212. 
213.     /* update SHA1 from key and salt */

src/core/ngx_string.c:1120:12: Call
  1118.     };
  1119. 
  1120.     return ngx_decode_base64_internal(dst, src, basis64);
                   ^
  1121. }
  1122. 

src/core/ngx_string.c:1151:1: Parameter `dst->len`
    1149. 
    1150. 
    1151. static ngx_int_t
          ^
    1152. ngx_decode_base64_internal(ngx_str_t *dst, ngx_str_t *src, const u_char *basis)
    1153. {

src/core/ngx_crypt.c:222:5: Assignment
220.     /* encode it back to base64 */
221. 
222.     len = sizeof("{SSHA}") - 1 + ngx_base64_encoded_length(decoded.len) + 1;
         ^
223. 
224.     *encrypted = ngx_pnalloc(pool, len);

src/core/ngx_crypt.c:224:18: Call
222.     len = sizeof("{SSHA}") - 1 + ngx_base64_encoded_length(decoded.len) + 1;
223. 
224.     *encrypted = ngx_pnalloc(pool, len);
                      ^
225.     if (*encrypted == NULL) {
226.         return NGX_ERROR;

src/core/ngx_palloc.c:156:13: Assignment
  154. 
  155.         do {
  156.             m = p->d.last;
                   ^
  157. 
  158.             if ((size_t) (p->d.end - m) >= size) {

src/core/ngx_palloc.c:161:17: Assignment
  159.                 p->d.last = m + size;
  160. 
  161.                 return m;
                       ^
  162.             }
  163. 

src/core/ngx_crypt.c:224:5: Assignment
222.     len = sizeof("{SSHA}") - 1 + ngx_base64_encoded_length(decoded.len) + 1;
223. 
224.     *encrypted = ngx_pnalloc(pool, len);
         ^
225.     if (*encrypted == NULL) {
226.         return NGX_ERROR;

src/core/ngx_crypt.c:229:20: Array access: Offset added: 6 Size: [0, +oo]
227.     }
228. 
229.     encoded.data = ngx_cpymem(*encrypted, "{SSHA}", sizeof("{SSHA}") - 1);
                        ^
230.     ngx_encode_base64(&encoded, &decoded);
231.     encoded.data[encoded.len] = '\0';
