test/sslapitest.c:305: error: BUFFER_OVERRUN_L1
  Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: 4 by call to `SSL_CTX_set_cipher_list`.
Showing all 13 steps of the trace


test/sslapitest.c:305:10: Call
303.   
304.       /* We also want to ensure that we use RSA-based key exchange. */
305.       rc = SSL_CTX_set_cipher_list(cctx, "RSA");
                ^
306.       if (rc == 0) {
307.           printf("Unable to restrict to RSA key exchange.\n");

ssl/ssl_lib.c:2098:1: Parameter `*str`
  2096.   
  2097.   /** specify the ciphers to be used by default by the SSL_CTX */
  2098. > int SSL_CTX_set_cipher_list(SSL_CTX *ctx, const char *str)
  2099.   {
  2100.       STACK_OF(SSL_CIPHER) *sk;

ssl/ssl_lib.c:2102:10: Call
  2100.       STACK_OF(SSL_CIPHER) *sk;
  2101.   
  2102.       sk = ssl_create_cipher_list(ctx->method, &ctx->cipher_list,
                   ^
  2103.                                   &ctx->cipher_list_by_id, str, ctx->cert);
  2104.       /*

ssl/ssl_ciph.c:1297:1: Parameter `*rule_str`
    1295.   #endif
    1296.   
    1297. > STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method, STACK_OF(SSL_CIPHER)
    1298.                                                **cipher_list, STACK_OF(SSL_CIPHER)
    1299.                                                **cipher_list_by_id,

ssl/ssl_ciph.c:1315:10: Call
    1313.           return NULL;
    1314.   #ifndef OPENSSL_NO_EC
    1315.       if (!check_suiteb_cipher_list(ssl_method, c, &rule_str))
                     ^
    1316.           return NULL;
    1317.   #endif

ssl/ssl_ciph.c:1243:1: Parameter `**prule_str`
      1241.   
      1242.   #ifndef OPENSSL_NO_EC
      1243. > static int check_suiteb_cipher_list(const SSL_METHOD *meth, CERT *c,
      1244.                                       const char **prule_str)
      1245.   {

ssl/ssl_ciph.c:1468:5: Assignment
    1466.        */
    1467.       ok = 1;
    1468.       rule_p = rule_str;
                ^
    1469.       if (strncmp(rule_str, "DEFAULT", 7) == 0) {
    1470.           ok = ssl_cipher_process_rulestr(SSL_DEFAULT_CIPHER_LIST,

ssl/ssl_ciph.c:1478:14: Call
    1476.   
    1477.       if (ok && (strlen(rule_p) > 0))
    1478.           ok = ssl_cipher_process_rulestr(rule_p, &head, &tail, ca_list, c);
                         ^
    1479.   
    1480.       OPENSSL_free(ca_list);      /* Not needed anymore */

ssl/ssl_ciph.c:987:1: <Length trace>
985.   }
986.   
987. > static int ssl_cipher_process_rulestr(const char *rule_str,
988.                                         CIPHER_ORDER **head_p,
989.                                         CIPHER_ORDER **tail_p,

ssl/ssl_ciph.c:987:1: Parameter `*rule_str`
      985.   }
      986.   
      987. > static int ssl_cipher_process_rulestr(const char *rule_str,
      988.                                         CIPHER_ORDER **head_p,
      989.                                         CIPHER_ORDER **tail_p,

ssl/ssl_ciph.c:1000:5: Assignment
      998.   
      999.       retval = 1;
      1000.       l = rule_str;
                  ^
      1001.       for (;;) {
      1002.           ch = *l;

ssl/ssl_ciph.c:1036:13: Assignment
      1034.           for (;;) {
      1035.               ch = *l;
      1036.               buf = l;
                          ^
      1037.               buflen = 0;
      1038.   #ifndef CHARSET_EBCDIC

ssl/ssl_ciph.c:1206:29: Array access: Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: 4 by call to `SSL_CTX_set_cipher_list` 
      1204.                   ok = ssl_cipher_strength_sort(head_p, tail_p);
      1205.               else if (buflen == 10 && strncmp(buf, "SECLEVEL=", 9) == 0) {
      1206.                   int level = buf[9] - '0';
                                          ^
      1207.                   if (level < 0 || level > 5) {
      1208.                       SSLerr(SSL_F_SSL_CIPHER_PROCESS_RULESTR,
