crypto/rand/drbg_rand.c:265: error: BUFFER_OVERRUN_L3
  Offset added: 32 Size: [0, +oo].
Showing all 3 steps of the trace


crypto/rand/drbg_rand.c:258:1: <Length trace>
256.   }
257.   
258. > int ctr_instantiate(DRBG_CTX *dctx,
259.                       const unsigned char *ent, size_t entlen,
260.                       const unsigned char *nonce, size_t noncelen,

crypto/rand/drbg_rand.c:258:1: Parameter `dctx->ctr.K[*]`
256.   }
257.   
258. > int ctr_instantiate(DRBG_CTX *dctx,
259.                       const unsigned char *ent, size_t entlen,
260.                       const unsigned char *nonce, size_t noncelen,

crypto/rand/drbg_rand.c:265:5: Array access: Offset added: 32 Size: [0, +oo]
263.       DRBG_CTR_CTX *cctx = &dctx->ctr;
264.   
265.       memset(cctx->K, 0, sizeof(cctx->K));
           ^
266.       memset(cctx->V, 0, sizeof(cctx->V));
267.       AES_set_encrypt_key(cctx->K, dctx->strength, &cctx->ks);

int ctr_instantiate(DRBG_CTX *dctx,
                    const unsigned char *ent, size_t entlen,
                    const unsigned char *nonce, size_t noncelen,
                    const unsigned char *pers, size_t perslen)
{
    DRBG_CTR_CTX *cctx = &dctx->ctr;
    memset(cctx->K, 0, sizeof(cctx->K));
    memset(cctx->V, 0, sizeof(cctx->V));
    AES_set_encrypt_key(cctx->K, dctx->strength, &cctx->ks);
    ctr_update(dctx, ent, entlen, pers, perslen, nonce, noncelen);
    return 1;
}
['int ctr_instantiate(DRBG_CTX *dctx,\n                    const unsigned char *ent, size_t entlen,\n                    const unsigned char *nonce, size_t noncelen,\n                    const unsigned char *pers, size_t perslen)\n{\n    DRBG_CTR_CTX *cctx = &dctx->ctr;\n    memset(cctx->K, 0, sizeof(cctx->K));\n    memset(cctx->V, 0, sizeof(cctx->V));\n    AES_set_encrypt_key(cctx->K, dctx->strength, &cctx->ks);\n    ctr_update(dctx, ent, entlen, pers, perslen, nonce, noncelen);\n    return 1;\n}']