src/http/modules/ngx_http_gzip_filter_module.c:1049: error: Buffer Overrun L3
  Offset: [-1, +oo] Size: [1, +oo] by call to `ngx_http_add_variable`.

src/http/modules/ngx_http_gzip_filter_module.c:1049:11: Call
1047.     ngx_http_variable_t  *var;
1048. 
1049.     var = ngx_http_add_variable(cf, &ngx_http_gzip_ratio, NGX_HTTP_VAR_NOHASH);
                ^
1050.     if (var == NULL) {
1051.         return NGX_ERROR;

src/http/ngx_http_variables.c:324:1: Parameter `name->len`
  322. 
  323. 
  324. ngx_http_variable_t *
       ^
  325. ngx_http_add_variable(ngx_conf_t *cf, ngx_str_t *name, ngx_uint_t flags)
  326. {

src/http/ngx_http_variables.c:365:5: Assignment
  363.     }
  364. 
  365.     v->name.len = name->len;
           ^
  366.     v->name.data = ngx_pnalloc(cf->pool, name->len);
  367.     if (v->name.data == NULL) {

src/http/ngx_http_variables.c:379:10: Call
  377.     v->index = 0;
  378. 
  379.     rc = ngx_hash_add_key(cmcf->variables_keys, &v->name, v, 0);
                ^
  380. 
  381.     if (rc == NGX_ERROR) {

src/core/ngx_hash.c:706:1: <Offset trace>
704. 
705. 
706. ngx_int_t
     ^
707. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
708.     ngx_uint_t flags)

src/core/ngx_hash.c:706:1: Parameter `key->len`
    704. 
    705. 
    706. ngx_int_t
         ^
    707. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
    708.     ngx_uint_t flags)

src/core/ngx_hash.c:706:1: <Length trace>
704. 
705. 
706. ngx_int_t
     ^
707. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
708.     ngx_uint_t flags)

src/core/ngx_hash.c:706:1: Parameter `*key->data`
    704. 
    705. 
    706. ngx_int_t
         ^
    707. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
    708.     ngx_uint_t flags)

src/core/ngx_hash.c:753:17: Array access: Offset: [-1, +oo] Size: [1, +oo] by call to `ngx_http_add_variable` 
    751.             }
    752. 
    753.             if (key->data[i - 2] == '.' && key->data[i - 1] == '*') {
                         ^
    754.                 skip = 0;
    755.                 last -= 2;
