crypto/x509/x509_cmp.c:90: error: BUFFER_OVERRUN_L3
  Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


crypto/x509/x509_cmp.c:90:9: Call
88.       if (ctx == NULL)
89.           goto err;
90.       f = X509_NAME_oneline(a->cert_info.issuer, NULL, 0);
              ^
91.       if (!EVP_DigestInit_ex(ctx, EVP_md5(), NULL))
92.           goto err;

crypto/x509/x509_obj.c:73:1: <Offset trace>
71.   #define NAME_ONELINE_MAX    (1024 * 1024)
72.   
73. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
74.   {
75.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:73:1: Parameter `len`
  71.   #define NAME_ONELINE_MAX    (1024 * 1024)
  72.   
  73. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  74.   {
  75.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:73:1: <Length trace>
71.   #define NAME_ONELINE_MAX    (1024 * 1024)
72.   
73. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
74.   {
75.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:73:1: Parameter `*buf`
  71.   #define NAME_ONELINE_MAX    (1024 * 1024)
  72.   
  73. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  74.   {
  75.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:105:9: Array access: Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline` 
  103.           }
  104.           strncpy(buf, "NO X509_NAME", len);
  105.           buf[len - 1] = '\0';
                 ^
  106.           return buf;
  107.       }
