crypto/evp/e_aes.c:1703: error: BUFFER_OVERRUN_L3
  Offset added: 16 Size: [0, +oo] by call to `CRYPTO_gcm128_tag`.
Showing all 6 steps of the trace


crypto/evp/e_aes.c:1703:9: Call
1701.               return 0;
1702.           }
1703.           CRYPTO_gcm128_tag(&gctx->gcm, ctx->buf, 16);
                ^
1704.           gctx->taglen = 16;
1705.           /* Don't reuse the IV */

crypto/modes/gcm128.c:1706:12: <Offset trace>
1704.       CRYPTO_gcm128_finish(ctx, NULL, 0);
1705.       memcpy(tag, ctx->Xi.c,
1706.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
                   ^
1707.   }
1708.   

crypto/modes/gcm128.c:1706:12: Assignment
  1704.       CRYPTO_gcm128_finish(ctx, NULL, 0);
  1705.       memcpy(tag, ctx->Xi.c,
  1706.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
                     ^
  1707.   }
  1708.   

crypto/modes/gcm128.c:1702:1: <Length trace>
1700.   }
1701.   
1702. > void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
1703.   {
1704.       CRYPTO_gcm128_finish(ctx, NULL, 0);

crypto/modes/gcm128.c:1702:1: Parameter `ctx->Xi.c[*]`
  1700.   }
  1701.   
  1702. > void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
  1703.   {
  1704.       CRYPTO_gcm128_finish(ctx, NULL, 0);

crypto/modes/gcm128.c:1705:5: Array access: Offset added: 16 Size: [0, +oo] by call to `CRYPTO_gcm128_tag` 
  1703.   {
  1704.       CRYPTO_gcm128_finish(ctx, NULL, 0);
  1705.       memcpy(tag, ctx->Xi.c,
              ^
  1706.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
  1707.   }
