src/http/modules/ngx_http_limit_req_module.c:814: error: Buffer Overrun L3
  Offset: [5, +oo] Size: [1, +oo] by call to `ngx_atoi`.

src/http/modules/ngx_http_limit_req_module.c:755:9: Call
753.     ccv.complex_value = &ctx->key;
754. 
755.     if (ngx_http_compile_complex_value(&ccv) != NGX_OK) {
             ^
756.         return NGX_CONF_ERROR;
757.     }

src/http/ngx_http_script.c:107:1: Parameter `*ccv->value->data`
  105. 
  106. 
  107. ngx_int_t
       ^
  108. ngx_http_compile_complex_value(ngx_http_compile_complex_value_t *ccv)
  109. {

src/http/modules/ngx_http_limit_req_module.c:814:20: Call
812.             }
813. 
814.             rate = ngx_atoi(value[i].data + 5, len - 5);
                        ^
815.             if (rate <= 0) {
816.                 ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,

src/core/ngx_string.c:897:1: <Length trace>
895. 
896. 
897. ngx_int_t
     ^
898. ngx_atoi(u_char *line, size_t n)
899. {

src/core/ngx_string.c:897:1: Parameter `*line`
  895. 
  896. 
  897. ngx_int_t
       ^
  898. ngx_atoi(u_char *line, size_t n)
  899. {

src/core/ngx_string.c:907:13: Array access: Offset: [5, +oo] Size: [1, +oo] by call to `ngx_atoi` 
  905. 
  906.     for (value = 0; n--; line++) {
  907.         if (*line < '0' || *line > '9') {
                   ^
  908.             return NGX_ERROR;
  909.         }
