src/http/ngx_http_variables.c:1796: error: Buffer Overrun S2
  Offset: [`re->variables->capture` + 1, `re->variables->capture` + 1] Size: [0, +oo].

src/http/ngx_http_variables.c:1753:1: <Offset trace>
1751. 
1752. 
1753. ngx_int_t
      ^
1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
1755. {

src/http/ngx_http_variables.c:1753:1: Parameter `re->variables->capture`
1751. 
1752. 
1753. ngx_int_t
      ^
1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
1755. {

src/http/ngx_http_variables.c:1792:9: Assignment
1790.     for (i = 0; i < re->nvariables; i++) {
1791. 
1792.         n = re->variables[i].capture;
              ^
1793.         index = re->variables[i].index;
1794.         vv = &r->variables[index];

src/http/ngx_http_variables.c:1753:1: <Length trace>
1751. 
1752. 
1753. ngx_int_t
      ^
1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
1755. {

src/http/ngx_http_variables.c:1753:1: Parameter `*r->captures`
1751. 
1752. 
1753. ngx_int_t
      ^
1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
1755. {

src/http/ngx_http_variables.c:1796:19: Array access: Offset: [re->variables->capture + 1, re->variables->capture + 1] Size: [0, +oo]
1794.         vv = &r->variables[index];
1795. 
1796.         vv->len = r->captures[n + 1] - r->captures[n];
                        ^
1797.         vv->valid = 1;
1798.         vv->no_cacheable = 0;
