src/http/modules/ngx_http_userid_filter_module.c:323: error: Buffer Overrun L2
  Offset: [0, 4048] Size: 2048 by call to `ngx_log_error_core`.

src/http/modules/ngx_http_userid_filter_module.c:304:15: Call
302. 
303.     if (ctx == NULL) {
304.         ctx = ngx_pcalloc(r->pool, sizeof(ngx_http_userid_ctx_t));
                   ^
305.         if (ctx == NULL) {
306.             return NULL;

src/core/ngx_palloc.c:288:9: Call
  286.     void *p;
  287. 
  288.     p = ngx_palloc(pool, size);
               ^
  289.     if (p) {
  290.         ngx_memzero(p, size);

src/core/ngx_palloc.c:137:16: Call
    135.         } while (p);
    136. 
    137.         return ngx_palloc_block(pool, size);
                        ^
    138.     }
    139. 

src/core/ngx_palloc.c:183:9: Call
      181.     psize = (size_t) (pool->d.end - (u_char *) pool);
      182. 
      183.     m = ngx_alloc(psize, pool->log);
                   ^
      184.     if (m == NULL) {
      185.         return NULL;

src/os/unix/ngx_alloc.c:16:1: Parameter `log->file->fd`
        14. 
        15. 
        16. void *
            ^
        17. ngx_alloc(size_t size, ngx_log_t *log)
        18. {

src/http/modules/ngx_http_userid_filter_module.c:323:9: Call
321.     if (ctx->cookie.len < 22) {
322.         cookies = r->headers_in.cookies.elts;
323.         ngx_log_error(NGX_LOG_ERR, r->connection->log, 0,
             ^
324.                       "client sent too short userid cookie \"%V\"",
325.                       &cookies[n]->value);

src/core/ngx_log.c:67:1: Array declaration
  65. #if (NGX_HAVE_VARIADIC_MACROS)
  66. 
  67. void
      ^
  68. ngx_log_error_core(ngx_uint_t level, ngx_log_t *log, ngx_err_t err,
  69.     const char *fmt, ...)

src/core/ngx_log.c:88:5: Assignment
  86.     }
  87. 
  88.     last = errstr + NGX_MAX_ERROR_STR;
          ^
  89. 
  90.     ngx_memcpy(errstr, ngx_cached_err_log_time.data,

src/core/ngx_log.c:133:13: Call
  131.                                            ? " (%d: " : " (%Xd: ", err);
  132. #else
  133.         p = ngx_snprintf(p, last - p, " (%d: ", err);
                   ^
  134. #endif
  135. 

src/core/ngx_string.c:109:1: Parameter `max`
    107. 
    108. 
    109. u_char * ngx_cdecl
         ^
    110. ngx_snprintf(u_char *buf, size_t max, const char *fmt, ...)
    111. {

src/core/ngx_string.c:116:9: Call
    114. 
    115.     va_start(args, fmt);
    116.     p = ngx_vsnprintf(buf, max, fmt, args);
                 ^
    117.     va_end(args);
    118. 

src/core/ngx_string.c:123:1: <Length trace>
121. 
122. 
123. u_char *
     ^
124. ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
125. {

src/core/ngx_string.c:123:1: Parameter `*buf`
      121. 
      122. 
      123. u_char *
           ^
      124. ngx_vsnprintf(u_char *buf, size_t max, const char *fmt, va_list args)
      125. {

src/core/ngx_string.c:244:25: Array access: Offset: [0, 4048] Size: 2048 by call to `ngx_log_error_core` 
      242.                 if (slen == (size_t) -1) {
      243.                     while (*p && buf < last) {
      244.                         *buf++ = *p++;
                                   ^
      245.                     }
      246. 
