ssl/statem/statem_dtls.c:765: error: BUFFER_OVERRUN_L3
  Offset added: 12 Size: [1, 2147483644].
Showing all 5 steps of the trace


ssl/statem/statem_dtls.c:726:1: <Length trace>
724.   }
725.   
726. > static int dtls_get_reassembled_message(SSL *s, int *errtype, size_t *len)
727.   {
728.       unsigned char wire[DTLS1_HM_HEADER_LENGTH];

ssl/statem/statem_dtls.c:726:1: Parameter `*s->init_buf->data`
724.   }
725.   
726. > static int dtls_get_reassembled_message(SSL *s, int *errtype, size_t *len)
727.   {
728.       unsigned char wire[DTLS1_HM_HEADER_LENGTH];

ssl/statem/statem_dtls.c:738:11: Call
736.    redo:
737.       /* see if we have the required fragment already */
738.       ret = dtls1_retrieve_buffered_fragment(s, &frag_len);
                 ^
739.       if (ret < 0) {
740.           /* SSLfatal() already called */

ssl/statem/statem_dtls.c:456:1: Parameter `*s->init_buf->data`
  454.    * fatal error.
  455.    */
  456. > static int dtls1_retrieve_buffered_fragment(SSL *s, size_t *len)
  457.   {
  458.       /*-

ssl/statem/statem_dtls.c:765:9: Array access: Offset added: 12 Size: [1, 2147483644]
763.           }
764.   
765.           memcpy(s->init_buf->data, wire, readbytes);
               ^
766.           s->init_num = readbytes - 1;
767.           s->init_msg = s->init_buf->data + 1;
