crypto/rand/drbg_ctr.c:289: error: BUFFER_OVERRUN_L3
  Offset added: 32 Size: [0, +oo].
Showing all 3 steps of the trace


crypto/rand/drbg_ctr.c:279:8: <Length trace>
277.   }
278.   
279.   __owur static int drbg_ctr_instantiate(RAND_DRBG *drbg,
              ^
280.                                          const unsigned char *entropy, size_t entropylen,
281.                                          const unsigned char *nonce, size_t noncelen,

crypto/rand/drbg_ctr.c:279:8: Parameter `drbg->data.ctr.K[*]`
277.   }
278.   
279.   __owur static int drbg_ctr_instantiate(RAND_DRBG *drbg,
              ^
280.                                          const unsigned char *entropy, size_t entropylen,
281.                                          const unsigned char *nonce, size_t noncelen,

crypto/rand/drbg_ctr.c:289:5: Array access: Offset added: 32 Size: [0, +oo]
287.           return 0;
288.   
289.       memset(ctr->K, 0, sizeof(ctr->K));
           ^
290.       memset(ctr->V, 0, sizeof(ctr->V));
291.       if (!EVP_CipherInit_ex(ctr->ctx, ctr->cipher, NULL, ctr->K, NULL, 1))

static int drbg_ctr_instantiate(RAND_DRBG *drbg,
                                       const unsigned char *entropy, size_t entropylen,
                                       const unsigned char *nonce, size_t noncelen,
                                       const unsigned char *pers, size_t perslen)
{
    RAND_DRBG_CTR *ctr = &drbg->data.ctr;
    if (entropy == NULL)
        return 0;
    memset(ctr->K, 0, sizeof(ctr->K));
    memset(ctr->V, 0, sizeof(ctr->V));
    if (!EVP_CipherInit_ex(ctr->ctx, ctr->cipher, NULL, ctr->K, NULL, 1))
        return 0;
    if (!ctr_update(drbg, entropy, entropylen, pers, perslen, nonce, noncelen))
        return 0;
    return 1;
}
['static int drbg_ctr_instantiate(RAND_DRBG *drbg,\n                                       const unsigned char *entropy, size_t entropylen,\n                                       const unsigned char *nonce, size_t noncelen,\n                                       const unsigned char *pers, size_t perslen)\n{\n    RAND_DRBG_CTR *ctr = &drbg->data.ctr;\n    if (entropy == NULL)\n        return 0;\n    memset(ctr->K, 0, sizeof(ctr->K));\n    memset(ctr->V, 0, sizeof(ctr->V));\n    if (!EVP_CipherInit_ex(ctr->ctx, ctr->cipher, NULL, ctr->K, NULL, 1))\n        return 0;\n    if (!ctr_update(drbg, entropy, entropylen, pers, perslen, nonce, noncelen))\n        return 0;\n    return 1;\n}']