crypto/x509/x509_cmp.c:42: error: BUFFER_OVERRUN_L3
  Offset added: [0, 200] Size: [1, 2147483644] by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


crypto/x509/x509_cmp.c:42:9: Call
40.       if (ctx == NULL)
41.           goto err;
42.       f = X509_NAME_oneline(a->cert_info.issuer, NULL, 0);
              ^
43.       if (!EVP_DigestInit_ex(ctx, EVP_md5(), NULL))
44.           goto err;

crypto/x509/x509_obj.c:25:1: <Offset trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
26.   {
27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `len`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
  26.   {
  27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: <Length trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
26.   {
27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `*buf`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
  26.   {
  27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:56:9: Array access: Offset added: [0, 200] Size: [1, 2147483644] by call to `X509_NAME_oneline` 
  54.               OPENSSL_free(b);
  55.           }
  56.           strncpy(buf, "NO X509_NAME", len);
                ^
  57.           buf[len - 1] = '\0';
  58.           return buf;
