crypto/x509/t_crl.c:53: error: BUFFER_OVERRUN_L3
  Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


crypto/x509/t_crl.c:53:9: Call
51.       X509_CRL_get0_signature(x, &sig, &sig_alg);
52.       X509_signature_print(out, sig_alg, NULL);
53.       p = X509_NAME_oneline(X509_CRL_get_issuer(x), NULL, 0);
              ^
54.       BIO_printf(out, "%8sIssuer: %s\n", "", p);
55.       OPENSSL_free(p);

crypto/x509/x509_obj.c:25:1: <Offset trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
26.   {
27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `len`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
  26.   {
  27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: <Length trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
26.   {
27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `*buf`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
  26.   {
  27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:57:9: Array access: Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline` 
  55.           }
  56.           strncpy(buf, "NO X509_NAME", len);
  57.           buf[len - 1] = '\0';
                ^
  58.           return buf;
  59.       }
