src/http/modules/ngx_http_referer_module.c:399: error: Buffer Overrun L3
  Offset added: [11, 18] (⇐ [0, 2] + [11, 16]) Size: [8, 120] by call to `ngx_http_add_variable`.

src/http/modules/ngx_http_referer_module.c:397:5: Assignment
395.     ngx_http_core_srv_conf_t  *cscf;
396. 
397.     ngx_str_set(&name, "invalid_referer");
         ^
398. 
399.     var = ngx_http_add_variable(cf, &name, NGX_HTTP_VAR_CHANGEABLE);

src/http/modules/ngx_http_referer_module.c:399:11: Call
397.     ngx_str_set(&name, "invalid_referer");
398. 
399.     var = ngx_http_add_variable(cf, &name, NGX_HTTP_VAR_CHANGEABLE);
               ^
400.     if (var == NULL) {
401.         return NGX_CONF_ERROR;

src/http/ngx_http_variables.c:349:1: Parameter `name->len`
  347. 
  348. 
  349. ngx_http_variable_t *
       ^
  350. ngx_http_add_variable(ngx_conf_t *cf, ngx_str_t *name, ngx_uint_t flags)
  351. {

src/http/ngx_http_variables.c:390:5: Assignment
  388.     }
  389. 
  390.     v->name.len = name->len;
           ^
  391.     v->name.data = ngx_pnalloc(cf->pool, name->len);
  392.     if (v->name.data == NULL) {

src/http/ngx_http_variables.c:404:10: Call
  402.     v->index = 0;
  403. 
  404.     rc = ngx_hash_add_key(cmcf->variables_keys, &v->name, v, 0);
                ^
  405. 
  406.     if (rc == NGX_ERROR) {

src/core/ngx_hash.c:742:13: <Offset trace>
740. 
741.         if (key->len > 1 && key->data[0] == '.') {
742.             skip = 1;
                 ^
743.             goto wildcard;
744.         }

src/core/ngx_hash.c:742:13: Assignment
    740. 
    741.         if (key->len > 1 && key->data[0] == '.') {
    742.             skip = 1;
                     ^
    743.             goto wildcard;
    744.         }

src/core/ngx_hash.c:956:5: Assignment
    954.     }
    955. 
    956.     name->len = last - skip;
             ^
    957.     name->data = ngx_pnalloc(ha->temp_pool, name->len);
    958.     if (name->data == NULL) {

src/core/ngx_hash.c:706:1: <Length trace>
704. 
705. 
706. ngx_int_t
     ^
707. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
708.     ngx_uint_t flags)

src/core/ngx_hash.c:706:1: Parameter `*key->data`
    704. 
    705. 
    706. ngx_int_t
         ^
    707. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
    708.     ngx_uint_t flags)

src/core/ngx_hash.c:962:5: Array access: Offset added: [11, 18] (⇐ [0, 2] + [11, 16]) Size: [8, 120] by call to `ngx_http_add_variable` 
    960.     }
    961. 
    962.     ngx_memcpy(name->data, key->data + skip, name->len);
             ^
    963. 
    964. 
