crypto/kmac/kmac.c:214: error: BUFFER_OVERRUN_L2
  Offset: [1, 8] Size: 3 by call to `right_encode`.
Showing all 10 steps of the trace


crypto/kmac/kmac.c:205:1: Array declaration
203.   }
204.   
205. > static int kmac_final(EVP_MAC_IMPL *kctx, unsigned char *out)
206.   {
207.       EVP_MD_CTX *ctx = kctx->ctx;

crypto/kmac/kmac.c:214:12: Call
212.       lbits = (kctx->xof_mode ? 0 : (kctx->out_len * 8));
213.   
214.       return right_encode(encoded_outlen, &len, lbits)
                  ^
215.              && EVP_DigestUpdate(ctx, encoded_outlen, len)
216.              && EVP_DigestFinalXOF(ctx, out, kctx->out_len);

crypto/kmac/kmac.c:339:24: <Offset trace>
337.   static int right_encode(unsigned char *out, int *out_len, size_t bits)
338.   {
339.       unsigned int len = get_encode_size(bits);
                              ^
340.       int i;
341.   

crypto/kmac/kmac.c:339:24: Call
  337.   static int right_encode(unsigned char *out, int *out_len, size_t bits)
  338.   {
  339.       unsigned int len = get_encode_size(bits);
                                ^
  340.       int i;
  341.   

crypto/kmac/kmac.c:317:5: Assignment
    315.   static unsigned int get_encode_size(size_t bits)
    316.   {
    317.       unsigned int cnt = 0, sz = sizeof(size_t);
               ^
    318.   
    319.       while (bits && (cnt < sz)) {

crypto/kmac/kmac.c:326:5: Assignment
    324.       if (cnt == 0)
    325.           cnt = 1;
    326.       return cnt;
               ^
    327.   }
    328.   

crypto/kmac/kmac.c:339:5: Assignment
  337.   static int right_encode(unsigned char *out, int *out_len, size_t bits)
  338.   {
  339.       unsigned int len = get_encode_size(bits);
             ^
  340.       int i;
  341.   

crypto/kmac/kmac.c:337:1: <Length trace>
335.    *
336.    */
337. > static int right_encode(unsigned char *out, int *out_len, size_t bits)
338.   {
339.       unsigned int len = get_encode_size(bits);

crypto/kmac/kmac.c:337:1: Parameter `*out`
  335.    *
  336.    */
  337. > static int right_encode(unsigned char *out, int *out_len, size_t bits)
  338.   {
  339.       unsigned int len = get_encode_size(bits);

crypto/kmac/kmac.c:352:5: Array access: Offset: [1, 8] Size: 3 by call to `right_encode` 
  350.       }
  351.       /* Tack the length onto the end */
  352.       out[len] = (unsigned char)len;
             ^
  353.   
  354.       /* The Returned length includes the tacked on byte */
