test/sslapitest.c:282: error: BUFFER_OVERRUN_L1
  Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: 4 by call to `SSL_CTX_set_cipher_list`.
Showing all 13 steps of the trace


test/sslapitest.c:282:10: Call
280.   
281.       /* We also want to ensure that we use RSA-based key exchange. */
282.       if (!TEST_true(SSL_CTX_set_cipher_list(cctx, "RSA")))
                ^
283.           goto end;
284.   

ssl/ssl_lib.c:2527:1: Parameter `*str`
  2525.   
  2526.   /** specify the ciphers to be used by default by the SSL_CTX */
  2527. > int SSL_CTX_set_cipher_list(SSL_CTX *ctx, const char *str)
  2528.   {
  2529.       STACK_OF(SSL_CIPHER) *sk;

ssl/ssl_lib.c:2531:10: Call
  2529.       STACK_OF(SSL_CIPHER) *sk;
  2530.   
  2531.       sk = ssl_create_cipher_list(ctx->method, ctx->tls13_ciphersuites,
                   ^
  2532.                                   &ctx->cipher_list, &ctx->cipher_list_by_id, str,
  2533.                                   ctx->cert);

ssl/ssl_ciph.c:1277:1: Parameter `*rule_str`
    1275.   #endif
    1276.   
    1277. > STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method,
    1278.                                                STACK_OF(SSL_CIPHER) *tls13_ciphersuites,
    1279.                                                STACK_OF(SSL_CIPHER) **cipher_list,

ssl/ssl_ciph.c:1297:10: Call
    1295.           return NULL;
    1296.   #ifndef OPENSSL_NO_EC
    1297.       if (!check_suiteb_cipher_list(ssl_method, c, &rule_str))
                     ^
    1298.           return NULL;
    1299.   #endif

ssl/ssl_ciph.c:1222:1: Parameter `**prule_str`
      1220.   
      1221.   #ifndef OPENSSL_NO_EC
      1222. > static int check_suiteb_cipher_list(const SSL_METHOD *meth, CERT *c,
      1223.                                       const char **prule_str)
      1224.   {

ssl/ssl_ciph.c:1446:5: Assignment
    1444.        */
    1445.       ok = 1;
    1446.       rule_p = rule_str;
                ^
    1447.       if (strncmp(rule_str, "DEFAULT", 7) == 0) {
    1448.           ok = ssl_cipher_process_rulestr(SSL_DEFAULT_CIPHER_LIST,

ssl/ssl_ciph.c:1456:14: Call
    1454.   
    1455.       if (ok && (strlen(rule_p) > 0))
    1456.           ok = ssl_cipher_process_rulestr(rule_p, &head, &tail, ca_list, c);
                         ^
    1457.   
    1458.       OPENSSL_free(ca_list);      /* Not needed anymore */

ssl/ssl_ciph.c:957:1: <Length trace>
955.   }
956.   
957. > static int ssl_cipher_process_rulestr(const char *rule_str,
958.                                         CIPHER_ORDER **head_p,
959.                                         CIPHER_ORDER **tail_p,

ssl/ssl_ciph.c:957:1: Parameter `*rule_str`
      955.   }
      956.   
      957. > static int ssl_cipher_process_rulestr(const char *rule_str,
      958.                                         CIPHER_ORDER **head_p,
      959.                                         CIPHER_ORDER **tail_p,

ssl/ssl_ciph.c:970:5: Assignment
      968.   
      969.       retval = 1;
      970.       l = rule_str;
                 ^
      971.       for ( ; ; ) {
      972.           ch = *l;

ssl/ssl_ciph.c:1006:13: Assignment
      1004.           for (;;) {
      1005.               ch = *l;
      1006.               buf = l;
                          ^
      1007.               buflen = 0;
      1008.   #ifndef CHARSET_EBCDIC

ssl/ssl_ciph.c:1184:29: Array access: Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: 4 by call to `SSL_CTX_set_cipher_list` 
      1182.                   ok = ssl_cipher_strength_sort(head_p, tail_p);
      1183.               } else if (buflen == 10 && strncmp(buf, "SECLEVEL=", 9) == 0) {
      1184.                   int level = buf[9] - '0';
                                          ^
      1185.                   if (level < 0 || level > 5) {
      1186.                       SSLerr(SSL_F_SSL_CIPHER_PROCESS_RULESTR,
