src/http/ngx_http_core_module.c:4892: error: Buffer Overrun L3
  Offset: [1, +oo] (⇐ [0, 5] + [1, +oo]) Size: [0, +oo] by call to `ngx_http_compile_complex_value`.

src/http/ngx_http_core_module.c:4879:13: Assignment
4877. 
4878.         if (ngx_strncmp(value[i].data, "from=", 5) == 0) {
4879.             value[i].len -= 5;
                  ^
4880.             value[i].data += 5;
4881. 

src/http/ngx_http_core_module.c:4892:17: Call
4890.             }
4891. 
4892.             if (ngx_http_compile_complex_value(&ccv) != NGX_OK) {
                      ^
4893.                 return NGX_CONF_ERROR;
4894.             }

src/http/ngx_http_script.c:107:1: Parameter `*ccv->value->data`
  105. 
  106. 
  107. ngx_int_t
       ^
  108. ngx_http_compile_complex_value(ngx_http_compile_complex_value_t *ccv)
  109. {

src/http/ngx_http_core_module.c:4880:13: Assignment
4878.         if (ngx_strncmp(value[i].data, "from=", 5) == 0) {
4879.             value[i].len -= 5;
4880.             value[i].data += 5;
                  ^
4881. 
4882.             ngx_memzero(&ccv, sizeof(ngx_http_compile_complex_value_t));

src/http/ngx_http_core_module.c:4892:17: Call
4890.             }
4891. 
4892.             if (ngx_http_compile_complex_value(&ccv) != NGX_OK) {
                      ^
4893.                 return NGX_CONF_ERROR;
4894.             }

src/http/ngx_http_script.c:107:1: Parameter `*ccv->value->data`
  105. 
  106. 
  107. ngx_int_t
       ^
  108. ngx_http_compile_complex_value(ngx_http_compile_complex_value_t *ccv)
  109. {

src/http/ngx_http_script.c:199:9: Call
  197.     sc.root_prefix = ccv->root_prefix;
  198. 
  199.     if (ngx_http_script_compile(&sc) != NGX_OK) {
               ^
  200.         return NGX_ERROR;
  201.     }

src/http/ngx_http_script.c:336:1: <Offset trace>
334. 
335. 
336. ngx_int_t
     ^
337. ngx_http_script_compile(ngx_http_script_compile_t *sc)
338. {

src/http/ngx_http_script.c:336:1: Parameter `sc->source->len`
    334. 
    335. 
    336. ngx_int_t
         ^
    337. ngx_http_script_compile(ngx_http_script_compile_t *sc)
    338. {

src/http/ngx_http_script.c:336:1: <Length trace>
334. 
335. 
336. ngx_int_t
     ^
337. ngx_http_script_compile(ngx_http_script_compile_t *sc)
338. {

src/http/ngx_http_script.c:336:1: Parameter `*sc->source->data`
    334. 
    335. 
    336. ngx_int_t
         ^
    337. ngx_http_script_compile(ngx_http_script_compile_t *sc)
    338. {

src/http/ngx_http_script.c:361:17: Array access: Offset: [1, +oo] (⇐ [0, 5] + [1, +oo]) Size: [0, +oo] by call to `ngx_http_compile_complex_value` 
    359.             ngx_uint_t  n;
    360. 
    361.             if (sc->source->data[i] >= '1' && sc->source->data[i] <= '9') {
                         ^
    362. 
    363.                 n = sc->source->data[i] - '0';
