ssl/ssl_rsa.c:993: error: BUFFER_OVERRUN_L3
  Offset: 7 Size: [1, +oo].
Showing all 6 steps of the trace


ssl/ssl_rsa.c:942:13: <Length trace>
940.           unsigned int version;
941.   
942.           if (PEM_read_bio(bin, &name, &header, &extension, &extension_length)
                   ^
943.               == 0) {
944.               /*

ssl/ssl_rsa.c:942:13: Call
940.           unsigned int version;
941.   
942.           if (PEM_read_bio(bin, &name, &header, &extension, &extension_length)
                   ^
943.               == 0) {
944.               /*

crypto/pem/pem_lib.c:973:1: Parameter `**data`
  971.   }
  972.   
  973. > int PEM_read_bio(BIO *bp, char **name, char **header, unsigned char **data,
  974.                    long *len)
  975.   {

crypto/pem/pem_lib.c:976:12: Call
  974.                    long *len)
  975.   {
  976.       return PEM_read_bio_ex(bp, name, header, data, len, PEM_FLAG_EAY_COMPATIBLE);
                    ^
  977.   }
  978.   

crypto/pem/pem_lib.c:896:1: Parameter `**data`
    894.    * characters, are malformed input and will be rejected.
    895.    */
    896. > int PEM_read_bio_ex(BIO *bp, char **name_out, char **header,
    897.                       unsigned char **data, long *len_out, unsigned int flags)
    898.   {

ssl/ssl_rsa.c:993:46: Array access: Offset: 7 Size: [1, +oo]
991.               /* 8 byte header: 4 bytes context, 2 bytes type, 2 bytes len */
992.               if (extension_length < 8
993.                       || (extension[6] << 8) + extension[7]
                                                    ^
994.                          != extension_length - 8) {
995.                   SSLerr(SSL_F_SSL_CTX_USE_SERVERINFO_FILE, SSL_R_BAD_DATA);
