crypto/pem/pem_lib.c:206: error: BUFFER_OVERRUN_L3
  Offset: 12 Size: [0, +oo] by call to `PEM_get_EVP_CIPHER_INFO`.
Showing all 9 steps of the trace


crypto/pem/pem_lib.c:183:2: Assignment
181.   	{
182.   	EVP_CIPHER_INFO cipher;
183.   	char *nm=NULL,*header=NULL;
        ^
184.   	unsigned char *p=NULL,*data=NULL;
185.   	long len;

crypto/pem/pem_lib.c:190:8: Call
188.   	for (;;)
189.   		{
190.   		if (!PEM_read_bio(bp,&nm,&header,&data,&len)) return(NULL);
              ^
191.   		if (	(strcmp(nm,name) == 0) ||
192.   			((strcmp(nm,PEM_STRING_RSA) == 0) &&

crypto/pem/pem_lib.c:550:1: Parameter `**header`
  548.   #endif
  549.   
  550. > int PEM_read_bio(BIO *bp, char **name, char **header, unsigned char **data,
  551.   	     long *len)
  552.   	{

crypto/pem/pem_lib.c:206:7: Call
204.   		Free(data);
205.   		}
206.   	if (!PEM_get_EVP_CIPHER_INFO(header,&cipher)) goto err;
             ^
207.   	if (!PEM_do_header(&cipher,data,&len,cb)) goto err;
208.   	p=data;

crypto/pem/pem_lib.c:378:1: <Length trace>
376.   	}
377.   
378. > int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher)
379.   	{
380.   	int o;

crypto/pem/pem_lib.c:378:1: Parameter `*header`
  376.   	}
  377.   
  378. > int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher)
  379.   	{
  380.   	int o;

crypto/pem/pem_lib.c:389:2: Assignment
  387.   	if (strncmp(header,"Proc-Type: ",11) != 0)
  388.   		{ PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO,PEM_R_NOT_PROC_TYPE); return(0); }
  389.   	header+=11;
          ^
  390.   	if (*header != '4') return(0); header++;
  391.   	if (*header != ',') return(0); header++;

crypto/pem/pem_lib.c:390:33: Assignment
  388.   		{ PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO,PEM_R_NOT_PROC_TYPE); return(0); }
  389.   	header+=11;
  390.   	if (*header != '4') return(0); header++;
                                         ^
  391.   	if (*header != ',') return(0); header++;
  392.   	if (strncmp(header,"ENCRYPTED",9) != 0)

crypto/pem/pem_lib.c:391:6: Array access: Offset: 12 Size: [0, +oo] by call to `PEM_get_EVP_CIPHER_INFO` 
  389.   	header+=11;
  390.   	if (*header != '4') return(0); header++;
  391.   	if (*header != ',') return(0); header++;
              ^
  392.   	if (strncmp(header,"ENCRYPTED",9) != 0)
  393.   		{ PEMerr(PEM_F_PEM_GET_EVP_CIPHER_INFO,PEM_R_NOT_ENCRYPTED); return(0); }
