crypto/srp/srp_vfy.c:568: error: BUFFER_OVERRUN_L3
  Offset: [-2, +oo] Size: 2500 by call to `t_tob64`.
Showing all 7 steps of the trace


crypto/srp/srp_vfy.c:520:1: Array declaration
518.    * create a verifier (*salt,*verifier,g and N are in base64)
519.    */
520. > char *SRP_create_verifier(const char *user, const char *pass, char **salt,
521.                             char **verifier, const char *N, const char *g)
522.   {

crypto/srp/srp_vfy.c:568:5: Call
566.       if (((vf = OPENSSL_malloc(BN_num_bytes(v) * 2)) == NULL))
567.           goto err;
568.       t_tob64(vf, tmp, BN_num_bytes(v));
           ^
569.   
570.       *verifier = vf;

crypto/srp/srp_vfy.c:138:1: <Offset trace>
136.    * Convert a raw byte string into a null-terminated base64 ASCII string.
137.    */
138. > static char *t_tob64(char *dst, const unsigned char *src, int size)
139.   {
140.       int c, pos = size % 3;

crypto/srp/srp_vfy.c:138:1: Parameter `size`
  136.    * Convert a raw byte string into a null-terminated base64 ASCII string.
  137.    */
  138. > static char *t_tob64(char *dst, const unsigned char *src, int size)
  139.   {
  140.       int c, pos = size % 3;

crypto/srp/srp_vfy.c:138:1: <Length trace>
136.    * Convert a raw byte string into a null-terminated base64 ASCII string.
137.    */
138. > static char *t_tob64(char *dst, const unsigned char *src, int size)
139.   {
140.       int c, pos = size % 3;

crypto/srp/srp_vfy.c:138:1: Parameter `*src`
  136.    * Convert a raw byte string into a null-terminated base64 ASCII string.
  137.    */
  138. > static char *t_tob64(char *dst, const unsigned char *src, int size)
  139.   {
  140.       int c, pos = size % 3;

crypto/srp/srp_vfy.c:178:18: Array access: Offset: [-2, +oo] Size: 2500 by call to `t_tob64` 
  176.               break;
  177.           else {
  178.               b0 = src[pos++];
                          ^
  179.               b1 = src[pos++];
  180.               b2 = src[pos++];
