apps/x509.c:725: error: BUFFER_OVERRUN_L2
  Offset: [-oo, 1048576] Size: 256 by call to `X509_NAME_oneline`.
Showing all 8 steps of the trace


apps/x509.c:145:1: Array declaration
143.   };
144.   
145. > int x509_main(int argc, char **argv)
146.   {
147.       ASN1_INTEGER *sno = NULL;

apps/x509.c:725:17: Call
723.                   int len;
724.   
725.                   X509_NAME_oneline(X509_get_subject_name(x), buf, sizeof buf);
                       ^
726.                   BIO_printf(out, "/*\n"
727.                                   " * Subject: %s\n", buf);

crypto/x509/x509_obj.c:62:5: <Offset trace>
60.   
61.       len--;                      /* space for '\0' */
62.       l = 0;
          ^
63.       for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
64.           ne = sk_X509_NAME_ENTRY_value(a->entries, i);

crypto/x509/x509_obj.c:62:5: Assignment
  60.   
  61.       len--;                      /* space for '\0' */
  62.       l = 0;
            ^
  63.       for (i = 0; i < sk_X509_NAME_ENTRY_num(a->entries); i++) {
  64.           ne = sk_X509_NAME_ENTRY_value(a->entries, i);

crypto/x509/x509_obj.c:121:9: Assignment
  119.           }
  120.   
  121.           lold = l;
                 ^
  122.           l += 1 + l1 + 1 + l2;
  123.           if (l > NAME_ONELINE_MAX) {

crypto/x509/x509_obj.c:25:1: <Length trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
26.   {
27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `*buf`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
  26.   {
  27.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:134:13: Array access: Offset: [-oo, 1048576] Size: 256 by call to `X509_NAME_oneline` 
  132.               break;
  133.           } else
  134.               p = &(buf[lold]);
                     ^
  135.           *(p++) = '/';
  136.           memcpy(p, s, (unsigned int)l1);
