ssl/t1_lib.c:1807: error: BUFFER_OVERRUN_L1
  Offset: [0, +oo] Size: 0 by call to `tls1_set_sigalgs`.
Showing all 9 steps of the trace


ssl/t1_lib.c:1802:5: Assignment
1800.   {
1801.       sig_cb_st sig;
1802.       sig.sigalgcnt = 0;
            ^
1803.       if (!CONF_parse_list(str, ':', 1, sig_cb, &sig))
1804.           return 0;

ssl/t1_lib.c:1807:12: Call
1805.       if (c == NULL)
1806.           return 1;
1807.       return tls1_set_sigalgs(c, sig.sigalgs, sig.sigalgcnt, client);
                   ^
1808.   }
1809.   

ssl/t1_lib.c:1811:1: <Length trace>
1809.   
1810.   /* TODO(TLS1.3): Needs updating to allow setting of TLS1.3 sig algs */
1811. > int tls1_set_sigalgs(CERT *c, const int *psig_nids, size_t salglen, int client)
1812.   {
1813.       unsigned int *sigalgs, *sptr;

ssl/t1_lib.c:1811:1: Parameter `salglen`
  1809.   
  1810.   /* TODO(TLS1.3): Needs updating to allow setting of TLS1.3 sig algs */
  1811. > int tls1_set_sigalgs(CERT *c, const int *psig_nids, size_t salglen, int client)
  1812.   {
  1813.       unsigned int *sigalgs, *sptr;

ssl/t1_lib.c:1818:15: Call
  1816.       if (salglen & 1)
  1817.           return 0;
  1818.       sigalgs = OPENSSL_malloc(salglen * sizeof(*sigalgs));
                        ^
  1819.       if (sigalgs == NULL)
  1820.           return 0;

crypto/mem.c:79:9: Assignment
    77.   
    78.       if (num <= 0)
    79.           return NULL;
                  ^
    80.   
    81.       allow_customize = 0;

ssl/t1_lib.c:1818:5: Assignment
  1816.       if (salglen & 1)
  1817.           return 0;
  1818.       sigalgs = OPENSSL_malloc(salglen * sizeof(*sigalgs));
              ^
  1819.       if (sigalgs == NULL)
  1820.           return 0;

ssl/t1_lib.c:1825:17: Assignment
  1823.        * RSA-PKCS1. For now we only allow setting of RSA-PKCS1
  1824.        */
  1825.       for (i = 0, sptr = sigalgs; i < salglen; i += 2) {
                          ^
  1826.           size_t j;
  1827.           SIGALG_LOOKUP *curr;

ssl/t1_lib.c:1837:17: Array access: Offset: [0, +oo] Size: 0 by call to `tls1_set_sigalgs` 
  1835.                   continue;
  1836.               if (curr->hash == md_id && curr->sig == sig_id) {
  1837.                   *sptr++ = curr->sigalg;
                          ^
  1838.                   break;
  1839.               }
