src/http/ngx_http_request.c:1715: error: Buffer Overrun L3
  Offset: [1, +oo] Size: [0, +oo] by call to `ngx_http_regex_exec`.

src/http/ngx_http_request.c:1693:12: Call
1691.     }
1692. 
1693.     cscf = ngx_hash_find_combined(&r->virtual_names->names,
                 ^
1694.                                   ngx_hash_key(host, len), host, len);
1695. 

src/core/ngx_hash.c:216:17: Call
  214. 
  215.     if (hash->hash.buckets) {
  216.         value = ngx_hash_find(&hash->hash, key, name, len);
                       ^
  217. 
  218.         if (value) {

src/http/ngx_http_request.c:1715:17: Call
1713.         for (i = 0; i < r->virtual_names->nregex; i++) {
1714. 
1715.             n = ngx_http_regex_exec(r, sn[i].regex, &name);
                      ^
1716. 
1717.             if (n == NGX_OK) {

src/http/ngx_http_variables.c:1753:1: <Offset trace>
1751. 
1752. 
1753. ngx_int_t
      ^
1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
1755. {

src/http/ngx_http_variables.c:1753:1: Parameter `re->variables->capture`
  1751. 
  1752. 
  1753. ngx_int_t
        ^
  1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
  1755. {

src/http/ngx_http_variables.c:1792:9: Assignment
  1790.     for (i = 0; i < re->nvariables; i++) {
  1791. 
  1792.         n = re->variables[i].capture;
                ^
  1793.         index = re->variables[i].index;
  1794.         vv = &r->variables[index];

src/http/ngx_http_variables.c:1753:1: <Length trace>
1751. 
1752. 
1753. ngx_int_t
      ^
1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
1755. {

src/http/ngx_http_variables.c:1753:1: Parameter `*r->captures`
  1751. 
  1752. 
  1753. ngx_int_t
        ^
  1754. ngx_http_regex_exec(ngx_http_request_t *r, ngx_http_regex_t *re, ngx_str_t *s)
  1755. {

src/http/ngx_http_variables.c:1796:19: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `ngx_http_regex_exec` 
  1794.         vv = &r->variables[index];
  1795. 
  1796.         vv->len = r->captures[n + 1] - r->captures[n];
                          ^
  1797.         vv->valid = 1;
  1798.         vv->no_cacheable = 0;
