crypto/evp/e_aes.c:3830: error: BUFFER_OVERRUN_L3
  Offset added: [2, 16] Size: [0, +oo] by call to `CRYPTO_ccm128_tag`.
Showing all 7 steps of the trace


crypto/evp/e_aes.c:3775:1: Parameter `ctx->cipher_data->M`
3773.   }
3774.   
3775. > static int aes_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
3776.                             const unsigned char *in, size_t len)
3777.   {

crypto/evp/e_aes.c:3830:17: Call
3828.               !CRYPTO_ccm128_decrypt(ccm, in, out, len)) {
3829.               unsigned char tag[16];
3830.               if (CRYPTO_ccm128_tag(ccm, tag, cctx->M)) {
                        ^
3831.                   if (!CRYPTO_memcmp(tag, EVP_CIPHER_CTX_buf_noconst(ctx),
3832.                                      cctx->M))

crypto/modes/ccm128.c:422:1: <Offset trace>
420.   }
421.   
422. > size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
423.   {
424.       unsigned int M = (ctx->nonce.c[0] >> 3) & 7; /* the M parameter */

crypto/modes/ccm128.c:422:1: Parameter `len`
  420.   }
  421.   
  422. > size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
  423.   {
  424.       unsigned int M = (ctx->nonce.c[0] >> 3) & 7; /* the M parameter */

crypto/modes/ccm128.c:422:1: <Length trace>
420.   }
421.   
422. > size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
423.   {
424.       unsigned int M = (ctx->nonce.c[0] >> 3) & 7; /* the M parameter */

crypto/modes/ccm128.c:422:1: Parameter `ctx->cmac.c[*]`
  420.   }
  421.   
  422. > size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
  423.   {
  424.       unsigned int M = (ctx->nonce.c[0] >> 3) & 7; /* the M parameter */

crypto/modes/ccm128.c:430:5: Array access: Offset added: [2, 16] Size: [0, +oo] by call to `CRYPTO_ccm128_tag` 
  428.       if (len < M)
  429.           return 0;
  430.       memcpy(tag, ctx->cmac.c, M);
             ^
  431.       return M;
  432.   }

size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
{
    unsigned int M = (ctx->nonce.c[0] >> 3) & 7;
    M *= 2;
    M += 2;
    if (len < M)
        return 0;
    memcpy(tag, ctx->cmac.c, M);
    return M;
}
['static int aes_ccm_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,\n                          const unsigned char *in, size_t len)\n{\n    EVP_AES_CCM_CTX *cctx = EVP_C_DATA(EVP_AES_CCM_CTX,ctx);\n    CCM128_CONTEXT *ccm = &cctx->ccm;\n    if (!cctx->key_set)\n        return -1;\n    if (cctx->tls_aad_len >= 0)\n        return aes_ccm_tls_cipher(ctx, out, in, len);\n    if (in == NULL && out != NULL)\n        return 0;\n    if (!cctx->iv_set)\n        return -1;\n    if (!EVP_CIPHER_CTX_encrypting(ctx) && !cctx->tag_set)\n        return -1;\n    if (!out) {\n        if (!in) {\n            if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx),\n                                    15 - cctx->L, len))\n                return -1;\n            cctx->len_set = 1;\n            return len;\n        }\n        if (!cctx->len_set && len)\n            return -1;\n        CRYPTO_ccm128_aad(ccm, in, len);\n        return len;\n    }\n    if (!cctx->len_set) {\n        if (CRYPTO_ccm128_setiv(ccm, EVP_CIPHER_CTX_iv_noconst(ctx),\n                                15 - cctx->L, len))\n            return -1;\n        cctx->len_set = 1;\n    }\n    if (EVP_CIPHER_CTX_encrypting(ctx)) {\n        if (cctx->str ? CRYPTO_ccm128_encrypt_ccm64(ccm, in, out, len,\n                                                    cctx->str) :\n            CRYPTO_ccm128_encrypt(ccm, in, out, len))\n            return -1;\n        cctx->tag_set = 1;\n        return len;\n    } else {\n        int rv = -1;\n        if (cctx->str ? !CRYPTO_ccm128_decrypt_ccm64(ccm, in, out, len,\n                                                     cctx->str) :\n            !CRYPTO_ccm128_decrypt(ccm, in, out, len)) {\n            unsigned char tag[16];\n            if (CRYPTO_ccm128_tag(ccm, tag, cctx->M)) {\n                if (!CRYPTO_memcmp(tag, EVP_CIPHER_CTX_buf_noconst(ctx),\n                                   cctx->M))\n                    rv = len;\n            }\n        }\n        if (rv == -1)\n            OPENSSL_cleanse(out, len);\n        cctx->iv_set = 0;\n        cctx->tag_set = 0;\n        cctx->len_set = 0;\n        return rv;\n    }\n}', 'size_t CRYPTO_ccm128_tag(CCM128_CONTEXT *ctx, unsigned char *tag, size_t len)\n{\n    unsigned int M = (ctx->nonce.c[0] >> 3) & 7;\n    M *= 2;\n    M += 2;\n    if (len < M)\n        return 0;\n    memcpy(tag, ctx->cmac.c, M);\n    return M;\n}']