ssl/statem/statem_srvr.c:3034: error: BUFFER_OVERRUN_L3
  Offset added: [1, 65280] Size: [8, 522240] by call to `EVP_EncryptUpdate`.
Showing all 9 steps of the trace


ssl/statem/statem_srvr.c:2941:17: Call
2939.   
2940.       /* get session encoding length */
2941.       slen_full = i2d_SSL_SESSION(s->session, NULL);
                        ^
2942.       /*
2943.        * Some length values are 16 bits, so forget it if session is too

ssl/ssl_asn1.c:195:9: Assignment
  193.   
  194.       if ((in == NULL) || ((in->cipher == NULL) && (in->cipher_id == 0)))
  195.           return 0;
                 ^
  196.   
  197.       memset(&as, 0, sizeof(as));

ssl/statem/statem_srvr.c:2941:5: Assignment
2939.   
2940.       /* get session encoding length */
2941.       slen_full = i2d_SSL_SESSION(s->session, NULL);
            ^
2942.       /*
2943.        * Some length values are 16 bits, so forget it if session is too

ssl/statem/statem_srvr.c:3034:10: Call
3032.       p += EVP_CIPHER_CTX_iv_length(ctx);
3033.       /* Encrypt session data */
3034.       if (!EVP_EncryptUpdate(ctx, p, &len, senc, slen))
                 ^
3035.           goto err;
3036.       p += len;

crypto/evp/evp_enc.c:310:1: <Offset trace>
308.   }
309.   
310. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
311.                         const unsigned char *in, int inl)
312.   {

crypto/evp/evp_enc.c:310:1: Parameter `inl`
  308.   }
  309.   
  310. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  311.                         const unsigned char *in, int inl)
  312.   {

crypto/evp/evp_enc.c:310:1: <Length trace>
308.   }
309.   
310. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
311.                         const unsigned char *in, int inl)
312.   {

crypto/evp/evp_enc.c:310:1: Parameter `*in`
  308.   }
  309.   
  310. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  311.                         const unsigned char *in, int inl)
  312.   {

crypto/evp/evp_enc.c:343:13: Array access: Offset added: [1, 65280] Size: [8, 522240] by call to `EVP_EncryptUpdate` 
  341.       if (i != 0) {
  342.           if (i + inl < bl) {
  343.               memcpy(&(ctx->buf[i]), in, inl);
                     ^
  344.               ctx->buf_len += inl;
  345.               *outl = 0;
