ssl/statem/extensions_cust.c:357: error: BUFFER_OVERRUN_S2
  Offset added: [`ctx->cert->custext.meths_count` + 56, `ctx->cert->custext.meths_count` + 56] (⇐ `ctx->cert->custext.meths_count` + 56) Size: [1, 56⋅`ctx->cert->custext.meths_count` + 56].
Showing all 6 steps of the trace


ssl/statem/extensions_cust.c:305:1: <Length trace>
303.   }
304.   
305. > static int add_custom_ext_intern(SSL_CTX *ctx, ENDPOINT role,
306.                                    unsigned int ext_type,
307.                                    unsigned int context,

ssl/statem/extensions_cust.c:305:1: Parameter `ctx->cert->custext.meths_count`
303.   }
304.   
305. > static int add_custom_ext_intern(SSL_CTX *ctx, ENDPOINT role,
306.                                    unsigned int ext_type,
307.                                    unsigned int context,

ssl/statem/extensions_cust.c:348:9: Call
346.           return 0;
347.       /* Search for duplicate */
348.       if (custom_ext_find(exts, role, ext_type, NULL))
               ^
349.           return 0;
350.       tmp = OPENSSL_realloc(exts->meths,

ssl/statem/extensions_cust.c:78:1: Parameter `exts->meths_count`
  76.    * client, or ENDPOINT_BOTH for either
  77.    */
  78. > custom_ext_method *custom_ext_find(const custom_ext_methods *exts,
  79.                                      ENDPOINT role, unsigned int ext_type,
  80.                                      size_t *idx)

ssl/statem/extensions_cust.c:356:5: Assignment
354.   
355.       exts->meths = tmp;
356.       meth = exts->meths + exts->meths_count;
           ^
357.       memset(meth, 0, sizeof(*meth));
358.       meth->role = role;

ssl/statem/extensions_cust.c:357:5: Array access: Offset added: [ctx->cert->custext.meths_count + 56, ctx->cert->custext.meths_count + 56] (⇐ ctx->cert->custext.meths_count + 56) Size: [1, 56⋅ctx->cert->custext.meths_count + 56]
355.       exts->meths = tmp;
356.       meth = exts->meths + exts->meths_count;
357.       memset(meth, 0, sizeof(*meth));
           ^
358.       meth->role = role;
359.       meth->context = context;
