=================================================================
==17016==ERROR: AddressSanitizer: negative-size-param: (size=-5)
    #0 0x7f2c2a4fb5bd in memcpy ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors_memintrinsics.inc:115
    #1 0x55f6edca14de in memcpy /usr/include/x86_64-linux-gnu/bits/string_fortified.h:29
    #2 0x55f6edca14de in ngx_http_map_uri_to_path src/http/ngx_http_core_module.c:1987
    #3 0x55f6edd326c1 in ngx_http_dav_copy_move_handler src/http/modules/ngx_http_dav_module.c:703
    #4 0x55f6edd34888 in ngx_http_dav_handler src/http/modules/ngx_http_dav_module.c:194
    #5 0x55f6edca16a7 in ngx_http_core_content_phase src/http/ngx_http_core_module.c:1282
    #6 0x55f6edc900f7 in ngx_http_core_run_phases src/http/ngx_http_core_module.c:889
    #7 0x55f6edc903fd in ngx_http_handler src/http/ngx_http_core_module.c:872
    #8 0x55f6edca9ff9 in ngx_http_process_request src/http/ngx_http_request.c:2172
    #9 0x55f6edcb1906 in ngx_http_process_request_headers src/http/ngx_http_request.c:1553
    #10 0x55f6edcb2fe7 in ngx_http_process_request_line src/http/ngx_http_request.c:1220
    #11 0x55f6edcb41ef in ngx_http_wait_request_handler src/http/ngx_http_request.c:524
    #12 0x55f6edc835d6 in ngx_epoll_process_events src/event/modules/ngx_epoll_module.c:901
    #13 0x55f6edc65a6f in ngx_process_events_and_timers src/event/ngx_event.c:248
    #14 0x55f6edc80bfb in ngx_single_process_cycle src/os/unix/ngx_process_cycle.c:300
    #15 0x55f6edc08610 in main src/core/nginx.c:381
    #16 0x7f2c2a02a1c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
    #17 0x7f2c2a02a28a in __libc_start_main_impl ../csu/libc-start.c:360
    #18 0x55f6edc04764 in _start (/root/.pruva/runs/cve-2026-27654_20260528-114500/builds/nginx-vuln/sbin/nginx+0x5e764) (BuildId: 2345543cc37cb9901bce5d24638a12e8262693d5)

0x519000004204 is located 132 bytes inside of 1024-byte region [0x519000004180,0x519000004580)
allocated by thread T0 here:
    #0 0x7f2c2a4fd9c7 in malloc ../../../../src/libsanitizer/asan/asan_malloc_linux.cpp:69
    #1 0x55f6edc70e7b in ngx_alloc src/os/unix/ngx_alloc.c:22
    #2 0x55f6edc0c1d9 in ngx_palloc_large src/core/ngx_palloc.c:220
    #3 0x55f6edc0c86e in ngx_palloc src/core/ngx_palloc.c:131
    #4 0x55f6edc1139d in ngx_create_temp_buf src/core/ngx_buf.c:22
    #5 0x55f6edcb42c7 in ngx_http_wait_request_handler src/http/ngx_http_request.c:403
    #6 0x55f6edc835d6 in ngx_epoll_process_events src/event/modules/ngx_epoll_module.c:901
    #7 0x55f6edc65a6f in ngx_process_events_and_timers src/event/ngx_event.c:248
    #8 0x55f6edc80bfb in ngx_single_process_cycle src/os/unix/ngx_process_cycle.c:300
    #9 0x55f6edc08610 in main src/core/nginx.c:381
    #10 0x7f2c2a02a1c9 in __libc_start_call_main ../sysdeps/nptl/libc_start_call_main.h:58
    #11 0x7f2c2a02a28a in __libc_start_main_impl ../csu/libc-start.c:360
    #12 0x55f6edc04764 in _start (/root/.pruva/runs/cve-2026-27654_20260528-114500/builds/nginx-vuln/sbin/nginx+0x5e764) (BuildId: 2345543cc37cb9901bce5d24638a12e8262693d5)

SUMMARY: AddressSanitizer: negative-size-param ../../../../src/libsanitizer/sanitizer_common/sanitizer_common_interceptors_memintrinsics.inc:115 in memcpy
==17016==ABORTING