crypto/pem/pem_seal.c:106: error: BUFFER_OVERRUN_L3
  Offset added: [1, +oo] Size: [0, +oo].
Showing all 10 steps of the trace


crypto/pem/pem_seal.c:103:5: <Offset trace>
101.   	for (i=0; i<npubk; i++)
102.   		{
103.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
           ^
104.   			RSA_size(pubk[i]->pkey.rsa));
105.   		ekl[i]=j;

crypto/pem/pem_seal.c:103:5: Call
101.   	for (i=0; i<npubk; i++)
102.   		{
103.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
           ^
104.   			RSA_size(pubk[i]->pkey.rsa));
105.   		ekl[i]=j;

crypto/evp/encode.c:190:2: Assignment
  188.   int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int dlen)
  189.   	{
  190.   	int i,ret=0;
          ^
  191.   	unsigned long l;
  192.   

crypto/evp/encode.c:219:2: Assignment
  217.   
  218.   	*t='\0';
  219.   	return(ret);
          ^
  220.   	}
  221.   

crypto/pem/pem_seal.c:103:3: Assignment
101.   	for (i=0; i<npubk; i++)
102.   		{
103.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
         ^
104.   			RSA_size(pubk[i]->pkey.rsa));
105.   		ekl[i]=j;

crypto/pem/pem_seal.c:74:2: <Length trace>
72.   	unsigned char key[EVP_MAX_KEY_LENGTH];
73.   	int ret= -1;
74.   	int i,j,max=0;
       ^
75.   	char *s=NULL;
76.   

crypto/pem/pem_seal.c:74:2: Assignment
72.   	unsigned char key[EVP_MAX_KEY_LENGTH];
73.   	int ret= -1;
74.   	int i,j,max=0;
       ^
75.   	char *s=NULL;
76.   

crypto/pem/pem_seal.c:87:12: Array declaration
85.   		if (j > max) max=j;
86.   		}
87.   	s=(char *)Malloc(max*2);
                 ^
88.   	if (s == NULL)
89.   		{

crypto/pem/pem_seal.c:87:2: Assignment
85.   		if (j > max) max=j;
86.   		}
87.   	s=(char *)Malloc(max*2);
       ^
88.   	if (s == NULL)
89.   		{

crypto/pem/pem_seal.c:106:3: Array access: Offset added: [1, +oo] Size: [0, +oo]
104.   			RSA_size(pubk[i]->pkey.rsa));
105.   		ekl[i]=j;
106.   		memcpy(ek[i],s,j+1);
         ^
107.   		}
108.   
