src/http/ngx_http_core_module.c:4892: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_http_compile_complex_value`.

src/http/ngx_http_core_module.c:4879:13: Assignment
4877. 
4878.         if (ngx_strncmp(value[i].data, "from=", 5) == 0) {
4879.             value[i].len -= 5;
                  ^
4880.             value[i].data += 5;
4881. 

src/http/ngx_http_core_module.c:4892:17: Call
4890.             }
4891. 
4892.             if (ngx_http_compile_complex_value(&ccv) != NGX_OK) {
                      ^
4893.                 return NGX_CONF_ERROR;
4894.             }

src/http/ngx_http_script.c:107:1: Parameter `*ccv->value->data`
  105. 
  106. 
  107. ngx_int_t
       ^
  108. ngx_http_compile_complex_value(ngx_http_compile_complex_value_t *ccv)
  109. {

src/http/ngx_http_core_module.c:4880:13: Assignment
4878.         if (ngx_strncmp(value[i].data, "from=", 5) == 0) {
4879.             value[i].len -= 5;
4880.             value[i].data += 5;
                  ^
4881. 
4882.             ngx_memzero(&ccv, sizeof(ngx_http_compile_complex_value_t));

src/http/ngx_http_core_module.c:4892:17: Call
4890.             }
4891. 
4892.             if (ngx_http_compile_complex_value(&ccv) != NGX_OK) {
                      ^
4893.                 return NGX_CONF_ERROR;
4894.             }

src/http/ngx_http_script.c:107:1: Parameter `*ccv->value->data`
  105. 
  106. 
  107. ngx_int_t
       ^
  108. ngx_http_compile_complex_value(ngx_http_compile_complex_value_t *ccv)
  109. {

src/http/ngx_http_script.c:199:9: Call
  197.     sc.root_prefix = ccv->root_prefix;
  198. 
  199.     if (ngx_http_script_compile(&sc) != NGX_OK) {
               ^
  200.         return NGX_ERROR;
  201.     }

src/http/ngx_http_script.c:336:1: Parameter `*sc->source->data`
    334. 
    335. 
    336. ngx_int_t
         ^
    337. ngx_http_script_compile(ngx_http_script_compile_t *sc)
    338. {

src/http/ngx_http_script.c:389:17: Assignment
    387.                 }
    388. 
    389.                 name.data = &sc->source->data[i];
                         ^
    390. 
    391.             } else {

src/http/ngx_http_script.c:429:17: Call
    427.             sc->variables++;
    428. 
    429.             if (ngx_http_script_add_var_code(sc, &name) != NGX_OK) {
                         ^
    430.                 return NGX_ERROR;
    431.             }

src/http/ngx_http_script.c:762:1: Parameter `*name->data`
      760. 
      761. 
      762. static ngx_int_t
           ^
      763. ngx_http_script_add_var_code(ngx_http_script_compile_t *sc, ngx_str_t *name)
      764. {

src/http/ngx_http_script.c:768:13: Call
      766.     ngx_http_script_var_code_t  *code;
      767. 
      768.     index = ngx_http_get_variable_index(sc->cf, name);
                       ^
      769. 
      770.     if (index == NGX_ERROR) {

src/http/ngx_http_variables.c:337:1: Parameter `*name->data`
        335. 
        336. 
        337. ngx_int_t
             ^
        338. ngx_http_get_variable_index(ngx_conf_t *cf, ngx_str_t *name)
        339. {

src/http/ngx_http_variables.c:379:5: Call
        377.     }
        378. 
        379.     ngx_strlow(v->name.data, name->data, name->len);
                 ^
        380. 
        381.     v->set_handler = NULL;

src/core/ngx_string.c:18:1: <Length trace>
16. 
17. 
18. void
    ^
19. ngx_strlow(u_char *dst, u_char *src, size_t n)
20. {

src/core/ngx_string.c:18:1: Parameter `*src`
          16. 
          17. 
          18. void
              ^
          19. ngx_strlow(u_char *dst, u_char *src, size_t n)
          20. {

src/core/ngx_string.c:22:16: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_http_compile_complex_value` 
          20. {
          21.     while (n) {
          22.         *dst = ngx_tolower(*src);
                             ^
          23.         dst++;
          24.         src++;
