Fix substring function range error with negative offset and length parameters

Fix substring function range error length when offset and length is negative constant and s is not constant. #33861 (RogerYK).