ssl/ssl_lib.c:264: error: BUFFER_OVERRUN_L3
  Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: [6, 25] by call to `ssl_create_cipher_list`.
Showing all 12 steps of the trace


ssl/ssl_lib.c:266:3: Array declaration
264.   	sk=ssl_create_cipher_list(ctx->method,&(ctx->cipher_list),
265.   		&(ctx->cipher_list_by_id),
266.   		meth->version == SSL2_VERSION ? "SSLv2" : SSL_DEFAULT_CIPHER_LIST, ctx->cert);
         ^
267.   	if ((sk == NULL) || (sk_SSL_CIPHER_num(sk) <= 0))
268.   		{

ssl/ssl_lib.c:264:5: Call
262.   	ctx->method=meth;
263.   
264.   	sk=ssl_create_cipher_list(ctx->method,&(ctx->cipher_list),
           ^
265.   		&(ctx->cipher_list_by_id),
266.   		meth->version == SSL2_VERSION ? "SSLv2" : SSL_DEFAULT_CIPHER_LIST, ctx->cert);

ssl/ssl_ciph.c:1460:1: Parameter `*rule_str`
  1458.   #endif
  1459.   
  1460. > STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method,
  1461.   		STACK_OF(SSL_CIPHER) **cipher_list,
  1462.   		STACK_OF(SSL_CIPHER) **cipher_list_by_id,

ssl/ssl_ciph.c:1478:7: Call
  1476.   		return NULL;
  1477.   #ifndef OPENSSL_NO_EC
  1478.   	if (!check_suiteb_cipher_list(ssl_method, c, &rule_str))
                ^
  1479.   		return NULL;
  1480.   #endif

ssl/ssl_ciph.c:1400:1: Parameter `**prule_str`
    1398.   	}
    1399.   #ifndef OPENSSL_NO_EC
    1400. > static int check_suiteb_cipher_list(const SSL_METHOD *meth, CERT *c,
    1401.   					const char **prule_str)
    1402.   	{

ssl/ssl_ciph.c:1577:2: Assignment
  1575.   	 */
  1576.   	ok = 1;
  1577.   	rule_p = rule_str;
           ^
  1578.   	if (strncmp(rule_str,"DEFAULT",7) == 0)
  1579.   		{

ssl/ssl_ciph.c:1588:8: Call
  1586.   
  1587.   	if (ok && (strlen(rule_p) > 0))
  1588.   		ok = ssl_cipher_process_rulestr(rule_p, &head, &tail, ca_list, c);
                 ^
  1589.   
  1590.   	OPENSSL_free((void *)ca_list);	/* Not needed anymore */

ssl/ssl_ciph.c:1134:1: <Length trace>
1132.   	}
1133.   
1134. > static int ssl_cipher_process_rulestr(const char *rule_str,
1135.                   CIPHER_ORDER **head_p, CIPHER_ORDER **tail_p,
1136.                   const SSL_CIPHER **ca_list, CERT *c)

ssl/ssl_ciph.c:1134:1: Parameter `*rule_str`
    1132.   	}
    1133.   
    1134. > static int ssl_cipher_process_rulestr(const char *rule_str,
    1135.                   CIPHER_ORDER **head_p, CIPHER_ORDER **tail_p,
    1136.                   const SSL_CIPHER **ca_list, CERT *c)

ssl/ssl_ciph.c:1145:2: Assignment
    1143.   
    1144.   	retval = 1;
    1145.   	l = rule_str;
             ^
    1146.   	for (;;)
    1147.   		{

ssl/ssl_ciph.c:1179:4: Assignment
    1177.   			{
    1178.   			ch = *l;
    1179.   			buf = l;
               ^
    1180.   			buflen = 0;
    1181.   #ifndef CHARSET_EBCDIC

ssl/ssl_ciph.c:1357:17: Array access: Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: [6, 25] by call to `ssl_create_cipher_list` 
    1355.   			else if (buflen == 10 && !strncmp(buf, "SECLEVEL=", 9))
    1356.   				{
    1357.   				int level = buf[9] - '0';
                            ^
    1358.   				if (level < 0 || level > 5)
    1359.   					{
