crypto/bio/bio_cb.c:110: error: BUFFER_OVERRUN_L3
  Offset: [-1, +oo] (⇐ [-1, 2147483647] + [0, +oo]) Size: 256 by call to `BIO_snprintf`.
Showing all 14 steps of the trace


crypto/bio/bio_cb.c:66:1: Array declaration
64.   #include <openssl/err.h>
65.   
66. > long BIO_debug_callback(BIO *bio, int cmd, const char *argp,
67.                           int argi, long argl, long ret)
68.   {

crypto/bio/bio_cb.c:81:5: Assignment
79.       len = BIO_snprintf(buf,sizeof buf,"BIO[%p]: ",(void *)bio);
80.   
81.       p = buf + len;
          ^
82.       p_maxlen = sizeof(buf) - len;
83.   

crypto/bio/bio_cb.c:110:9: Call
108.           break;
109.       case BIO_CB_GETS:
110.           BIO_snprintf(p, p_maxlen, "gets(%lu) - %s\n", (unsigned long)argi,
               ^
111.                        bio->method->name);
112.           break;

crypto/bio/b_print.c:794:1: Parameter `*buf`
  792.    * function should be renamed, but to what?)
  793.    */
  794. > int BIO_snprintf(char *buf, size_t n, const char *format, ...)
  795.   {
  796.       va_list args;

crypto/bio/b_print.c:801:11: Call
  799.       va_start(args, format);
  800.   
  801.       ret = BIO_vsnprintf(buf, n, format, args);
                   ^
  802.   
  803.       va_end(args);

crypto/bio/b_print.c:807:1: Parameter `*buf`
    805.   }
    806.   
    807. > int BIO_vsnprintf(char *buf, size_t n, const char *format, va_list args)
    808.   {
    809.       size_t retlen;

crypto/bio/b_print.c:812:5: Call
    810.       int truncated;
    811.   
    812.       _dopr(&buf, NULL, &n, &retlen, &truncated, format, args);
               ^
    813.   
    814.       if (truncated)

crypto/bio/b_print.c:168:1: Parameter `*maxlen`
      166.   #define OSSL_MAX(p,q) ((p >= q) ? p : q)
      167.   
      168. > static void
      169.   _dopr(char **sbuffer,
      170.         char **buffer,

crypto/bio/b_print.c:199:17: Call
      197.                   state = DP_S_FLAGS;
      198.               else
      199.                   doapr_outch(sbuffer, buffer, &currlen, maxlen, ch);
                             ^
      200.               ch = *format++;
      201.               break;

crypto/bio/b_print.c:703:1: <Offset trace>
701.   }
702.   
703. > static void
704.   doapr_outch(char **sbuffer,
705.               char **buffer, size_t *currlen, size_t *maxlen, int c)

crypto/bio/b_print.c:703:1: Parameter `*maxlen`
        701.   }
        702.   
        703. > static void
        704.   doapr_outch(char **sbuffer,
        705.               char **buffer, size_t *currlen, size_t *maxlen, int c)

crypto/bio/b_print.c:703:1: <Length trace>
701.   }
702.   
703. > static void
704.   doapr_outch(char **sbuffer,
705.               char **buffer, size_t *currlen, size_t *maxlen, int c)

crypto/bio/b_print.c:703:1: Parameter `**sbuffer`
        701.   }
        702.   
        703. > static void
        704.   doapr_outch(char **sbuffer,
        705.               char **buffer, size_t *currlen, size_t *maxlen, int c)

crypto/bio/b_print.c:740:13: Array access: Offset: [-1, +oo] (⇐ [-1, 2147483647] + [0, +oo]) Size: 256 by call to `BIO_snprintf` 
        738.       if (*currlen < *maxlen) {
        739.           if (*sbuffer)
        740.               (*sbuffer)[(*currlen)++] = (char)c;
                           ^
        741.           else
        742.               (*buffer)[(*currlen)++] = (char)c;
