src/http/ngx_http_variables.c:2567: error: Buffer Overrun L3
  Offset added: [-3, +oo] (⇐ [0, 2] + [-3, +oo]) Size: [8, +oo] by call to `ngx_http_add_variable`.

src/http/ngx_http_variables.c:2567:13: Call
2565. 
2566.     for (cv = ngx_http_core_variables; cv->name.len; cv++) {
2567.         v = ngx_http_add_variable(cf, &cv->name, cv->flags);
                  ^
2568.         if (v == NULL) {
2569.             return NGX_ERROR;

src/http/ngx_http_variables.c:387:1: Parameter `name->len`
  385. 
  386. 
  387. ngx_http_variable_t *
       ^
  388. ngx_http_add_variable(ngx_conf_t *cf, ngx_str_t *name, ngx_uint_t flags)
  389. {

src/http/ngx_http_variables.c:2567:13: Call
2565. 
2566.     for (cv = ngx_http_core_variables; cv->name.len; cv++) {
2567.         v = ngx_http_add_variable(cf, &cv->name, cv->flags);
                  ^
2568.         if (v == NULL) {
2569.             return NGX_ERROR;

src/http/ngx_http_variables.c:387:1: Parameter `name->len`
  385. 
  386. 
  387. ngx_http_variable_t *
       ^
  388. ngx_http_add_variable(ngx_conf_t *cf, ngx_str_t *name, ngx_uint_t flags)
  389. {

src/http/ngx_http_variables.c:434:5: Assignment
  432.     }
  433. 
  434.     v->name.len = name->len;
           ^
  435.     v->name.data = ngx_pnalloc(cf->pool, name->len);
  436.     if (v->name.data == NULL) {

src/http/ngx_http_variables.c:448:10: Call
  446.     v->index = 0;
  447. 
  448.     rc = ngx_hash_add_key(cmcf->variables_keys, &v->name, v, 0);
                ^
  449. 
  450.     if (rc == NGX_ERROR) {

src/core/ngx_hash.c:752:13: <Offset trace>
750. 
751.         if (key->len > 1 && key->data[0] == '.') {
752.             skip = 1;
                 ^
753.             goto wildcard;
754.         }

src/core/ngx_hash.c:752:13: Assignment
    750. 
    751.         if (key->len > 1 && key->data[0] == '.') {
    752.             skip = 1;
                     ^
    753.             goto wildcard;
    754.         }

src/core/ngx_hash.c:966:5: Assignment
    964.     }
    965. 
    966.     name->len = last - skip;
             ^
    967.     name->data = ngx_pnalloc(ha->temp_pool, name->len);
    968.     if (name->data == NULL) {

src/core/ngx_hash.c:712:1: <Length trace>
710. 
711. 
712. ngx_int_t
     ^
713. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
714.     ngx_uint_t flags)

src/core/ngx_hash.c:712:1: Parameter `*key->data`
    710. 
    711. 
    712. ngx_int_t
         ^
    713. ngx_hash_add_key(ngx_hash_keys_arrays_t *ha, ngx_str_t *key, void *value,
    714.     ngx_uint_t flags)

src/core/ngx_hash.c:972:5: Array access: Offset added: [-3, +oo] (⇐ [0, 2] + [-3, +oo]) Size: [8, +oo] by call to `ngx_http_add_variable` 
    970.     }
    971. 
    972.     ngx_memcpy(name->data, key->data + skip, name->len);
             ^
    973. 
    974. 
