src/http/ngx_http_request.c:470: error: Buffer Overrun L3
  Offset: 10 (⇐ 6 + 4) Size: [0, +oo] by call to `ngx_proxy_protocol_read`.

src/http/ngx_http_request.c:402:5: Assignment
400.     cscf = ngx_http_get_module_srv_conf(hc->conf_ctx, ngx_http_core_module);
401. 
402.     size = cscf->client_header_buffer_size;
         ^
403. 
404.     b = c->buffer;

src/http/ngx_http_request.c:407:13: Call
405. 
406.     if (b == NULL) {
407.         b = ngx_create_temp_buf(c->pool, size);
                 ^
408.         if (b == NULL) {
409.             ngx_http_close_connection(c);

src/core/ngx_buf.c:12:1: Parameter `size`
  10. 
  11. 
  12. ngx_buf_t *
      ^
  13. ngx_create_temp_buf(ngx_pool_t *pool, size_t size)
  14. {

src/core/ngx_buf.c:22:16: Call
  20.     }
  21. 
  22.     b->start = ngx_palloc(pool, size);
                     ^
  23.     if (b->start == NULL) {
  24.         return NULL;

src/core/ngx_palloc.c:130:13: Assignment
    128. 
    129.         do {
    130.             m = ngx_align_ptr(p->d.last, NGX_ALIGNMENT);
                     ^
    131. 
    132.             if ((size_t) (p->d.end - m) >= size) {

src/core/ngx_palloc.c:135:17: Assignment
    133.                 p->d.last = m + size;
    134. 
    135.                 return m;
                         ^
    136.             }
    137. 

src/core/ngx_buf.c:22:5: Assignment
  20.     }
  21. 
  22.     b->start = ngx_palloc(pool, size);
          ^
  23.     if (b->start == NULL) {
  24.         return NULL;

src/core/ngx_buf.c:38:5: Assignment
  36.      */
  37. 
  38.     b->pos = b->start;
          ^
  39.     b->last = b->start;
  40.     b->end = b->last + size;

src/http/ngx_http_request.c:470:13: Call
468.         hc->proxy_protocol = 0;
469. 
470.         p = ngx_proxy_protocol_read(c, b->pos, b->last);
                 ^
471. 
472.         if (p == NULL) {

src/core/ngx_proxy_protocol.c:12:1: <Length trace>
10. 
11. 
12. u_char *
    ^
13. ngx_proxy_protocol_read(ngx_connection_t *c, u_char *buf, u_char *last)
14. {

src/core/ngx_proxy_protocol.c:12:1: Parameter `*buf`
  10. 
  11. 
  12. u_char *
      ^
  13. ngx_proxy_protocol_read(ngx_connection_t *c, u_char *buf, u_char *last)
  14. {

src/core/ngx_proxy_protocol.c:18:5: Assignment
  16.     u_char  ch, *p, *addr;
  17. 
  18.     p = buf;
          ^
  19.     len = last - buf;
  20. 

src/core/ngx_proxy_protocol.c:25:5: Assignment
  23.     }
  24. 
  25.     p += 6;
          ^
  26.     len -= 6;
  27. 

src/core/ngx_proxy_protocol.c:36:44: Array access: Offset: 10 (⇐ 6 + 4) Size: [0, +oo] by call to `ngx_proxy_protocol_read` 
  34. 
  35.     if (len < 5 || ngx_strncmp(p, "TCP", 3) != 0
  36.         || (p[3] != '4' && p[3] != '6') || p[4] != ' ')
                                                 ^
  37.     {
  38.         goto invalid;
