ssl/statem/statem_srvr.c:2959: error: BUFFER_OVERRUN_S2
  Offset: [`s->method->ssl3_enc->hhlen` + 5, `s->method->ssl3_enc->hhlen` + 5] (⇐ [`s->method->ssl3_enc->hhlen` + 4, `s->method->ssl3_enc->hhlen` + 4] + 1) Size: [1, 2147483644].
Showing all 8 steps of the trace


ssl/statem/statem_srvr.c:2874:1: <Length trace>
2872.   }
2873.   
2874. > int tls_construct_new_session_ticket(SSL *s)
2875.   {
2876.       unsigned char *senc = NULL;

ssl/statem/statem_srvr.c:2874:1: Parameter `s->method->ssl3_enc->hhlen`
2872.   }
2873.   
2874. > int tls_construct_new_session_ticket(SSL *s)
2875.   {
2876.       unsigned char *senc = NULL;

ssl/statem/statem_srvr.c:2947:5: Assignment
2945.           goto err;
2946.   
2947.       p = ssl_handshake_start(s);
            ^
2948.       /*
2949.        * Initialize HMAC and cipher contexts. If callback present it does

ssl/statem/statem_srvr.c:2958:13: Assignment
2956.   
2957.           if (ret == 0) {
2958.               l2n(0, p); /* timeout */
                    ^
2959.               s2n(0, p); /* length */
2960.               if (!ssl_set_handshake_header(s, SSL3_MT_NEWSESSION_TICKET, p - ssl_handshake_start(s)))

ssl/statem/statem_srvr.c:2958:13: Assignment
2956.   
2957.           if (ret == 0) {
2958.               l2n(0, p); /* timeout */
                    ^
2959.               s2n(0, p); /* length */
2960.               if (!ssl_set_handshake_header(s, SSL3_MT_NEWSESSION_TICKET, p - ssl_handshake_start(s)))

ssl/statem/statem_srvr.c:2958:13: Assignment
2956.   
2957.           if (ret == 0) {
2958.               l2n(0, p); /* timeout */
                    ^
2959.               s2n(0, p); /* length */
2960.               if (!ssl_set_handshake_header(s, SSL3_MT_NEWSESSION_TICKET, p - ssl_handshake_start(s)))

ssl/statem/statem_srvr.c:2958:13: Assignment
2956.   
2957.           if (ret == 0) {
2958.               l2n(0, p); /* timeout */
                    ^
2959.               s2n(0, p); /* length */
2960.               if (!ssl_set_handshake_header(s, SSL3_MT_NEWSESSION_TICKET, p - ssl_handshake_start(s)))

ssl/statem/statem_srvr.c:2959:13: Array access: Offset: [s->method->ssl3_enc->hhlen + 5, s->method->ssl3_enc->hhlen + 5] (⇐ [s->method->ssl3_enc->hhlen + 4, s->method->ssl3_enc->hhlen + 4] + 1) Size: [1, 2147483644]
2957.           if (ret == 0) {
2958.               l2n(0, p); /* timeout */
2959.               s2n(0, p); /* length */
                    ^
2960.               if (!ssl_set_handshake_header(s, SSL3_MT_NEWSESSION_TICKET, p - ssl_handshake_start(s)))
2961.                   goto err;
