ssl/t1_lib.c:538: error: BUFFER_OVERRUN_L3
  Offset: [-1, +oo] Size: 28 by call to `tls_curve_allowed`.
Showing all 7 steps of the trace


ssl/t1_lib.c:273:1: Array declaration
271.   };
272.   
273. > static const unsigned char eccurves_default[] = {
274.       0, 14,                      /* sect571r1 (14) */
275.       0, 13,                      /* sect571k1 (13) */

ssl/t1_lib.c:538:22: Call
536.           for (j = 0; j < num_supp; j++, tsupp += 2) {
537.               if (pref[0] == tsupp[0] && pref[1] == tsupp[1]) {
538.                   if (!tls_curve_allowed(s, pref, SSL_SECOP_CURVE_SHARED))
                            ^
539.                       continue;
540.                   if (nmatch == k) {

ssl/t1_lib.c:442:1: <Offset trace>
440.   
441.   /* See if curve is allowed by security callback */
442. > static int tls_curve_allowed(SSL *s, const unsigned char *curve, int op)
443.   {
444.       const tls_curve_info *cinfo;

ssl/t1_lib.c:442:1: Parameter `*curve`
  440.   
  441.   /* See if curve is allowed by security callback */
  442. > static int tls_curve_allowed(SSL *s, const unsigned char *curve, int op)
  443.   {
  444.       const tls_curve_info *cinfo;

ssl/t1_lib.c:236:1: <Length trace>
234.   # define TLS_CURVE_PRIME         0x0
235.   
236. > static const tls_curve_info nid_list[] = {
237.       {NID_sect163k1, 80, TLS_CURVE_CHAR2}, /* sect163k1 (1) */
238.       {NID_sect163r1, 80, TLS_CURVE_CHAR2}, /* sect163r1 (2) */

ssl/t1_lib.c:236:1: Array declaration
  234.   # define TLS_CURVE_PRIME         0x0
  235.   
  236. > static const tls_curve_info nid_list[] = {
  237.       {NID_sect163k1, 80, TLS_CURVE_CHAR2}, /* sect163k1 (1) */
  238.       {NID_sect163r1, 80, TLS_CURVE_CHAR2}, /* sect163r1 (2) */

ssl/t1_lib.c:450:5: Array access: Offset: [-1, +oo] Size: 28 by call to `tls_curve_allowed` 
  448.                              sizeof(nid_list) / sizeof(nid_list[0])))
  449.           return 0;
  450.       cinfo = &nid_list[curve[1] - 1];
             ^
  451.   # ifdef OPENSSL_NO_EC2M
  452.       if (cinfo->flags & TLS_CURVE_CHAR2)
