src/http/modules/ngx_http_limit_conn_module.c:198: error: Integer Overflow L2
  ([0, 291] - 1):unsigned64 by call to `ngx_slab_alloc_locked`.

src/http/modules/ngx_http_limit_conn_module.c:166:13: Call
164.         ctx = limits[i].shm_zone->data;
165. 
166.         if (ngx_http_complex_value(r, &ctx->key, &key) != NGX_OK) {
                 ^
167.             return NGX_HTTP_INTERNAL_SERVER_ERROR;
168.         }

src/http/ngx_http_script.c:57:1: Parameter `value->len`
  55. 
  56. 
  57. ngx_int_t
      ^
  58. ngx_http_complex_value(ngx_http_request_t *r, ngx_http_complex_value_t *val,
  59.     ngx_str_t *value)

src/http/modules/ngx_http_limit_conn_module.c:194:13: Assignment
192.         if (node == NULL) {
193. 
194.             n = offsetof(ngx_rbtree_node_t, color)
                 ^
195.                 + offsetof(ngx_http_limit_conn_node_t, data)
196.                 + key.len;

src/http/modules/ngx_http_limit_conn_module.c:198:20: Call
196.                 + key.len;
197. 
198.             node = ngx_slab_alloc_locked(shpool, n);
                        ^
199. 
200.             if (node == NULL) {

src/core/ngx_slab.c:180:1: <LHS trace>
178. 
179. 
180. void *
     ^
181. ngx_slab_alloc_locked(ngx_slab_pool_t *pool, size_t size)
182. {

src/core/ngx_slab.c:180:1: Global `ngx_slab_max_size`
  178. 
  179. 
  180. void *
       ^
  181. ngx_slab_alloc_locked(ngx_slab_pool_t *pool, size_t size)
  182. {

src/core/ngx_slab.c:207:14: Binary operation: ([0, 291] - 1):unsigned64 by call to `ngx_slab_alloc_locked` 
  205.     if (size > pool->min_size) {
  206.         shift = 1;
  207.         for (s = size - 1; s >>= 1; shift++) { /* void */ }
                    ^
  208.         slot = shift - pool->min_shift;
  209. 
