crypto/asn1/t_pkey.c:211: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `print`.
Showing all 9 steps of the trace


crypto/asn1/t_pkey.c:187:3: Assignment
185.   		i=BN_num_bytes(bn)*2;
186.   	else
187.   		i=256;
         ^
188.   	m=(unsigned char *)Malloc((unsigned int)i+10);
189.   	if (m == NULL)

crypto/asn1/t_pkey.c:188:21: Array declaration
186.   	else
187.   		i=256;
188.   	m=(unsigned char *)Malloc((unsigned int)i+10);
                           ^
189.   	if (m == NULL)
190.   		{

crypto/asn1/t_pkey.c:188:2: Assignment
186.   	else
187.   		i=256;
188.   	m=(unsigned char *)Malloc((unsigned int)i+10);
        ^
189.   	if (m == NULL)
190.   		{

crypto/asn1/t_pkey.c:211:25: Call
209.   	if ((x->pub_key  != NULL) && !print(bp,"pub: ",x->pub_key,m,off))
210.   		goto err;
211.   	if ((x->p != NULL) && !print(bp,"P:   ",x->p,m,off)) goto err;
                               ^
212.   	if ((x->q != NULL) && !print(bp,"Q:   ",x->q,m,off)) goto err;
213.   	if ((x->g != NULL) && !print(bp,"G:   ",x->g,m,off)) goto err;

crypto/asn1/t_pkey.c:221:1: Parameter `*buf`
  219.   #endif /* !NO_DSA */
  220.   
  221. > static int print(BIO *bp, const char *number, BIGNUM *num, unsigned char *buf,
  222.   	     int off)
  223.   	{

crypto/asn1/t_pkey.c:249:5: Call
  247.   			(neg[0] == '-')?" (Negative)":"") <= 0)
  248.   			return(0);
  249.   		n=BN_bn2bin(num,&buf[1]);
             ^
  250.   	
  251.   		if (buf[1] & 0x80)

crypto/bn/bn_lib.c:611:1: <Length trace>
609.   
610.   /* ignore negative */
611. > int BN_bn2bin(BIGNUM *a, unsigned char *to)
612.   	{
613.   	int n,i;

crypto/bn/bn_lib.c:611:1: Parameter `*to`
    609.   
    610.   /* ignore negative */
    611. > int BN_bn2bin(BIGNUM *a, unsigned char *to)
    612.   	{
    613.   	int n,i;

crypto/bn/bn_lib.c:620:3: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `print` 
    618.   		{
    619.   		l=a->d[i/BN_BYTES];
    620.   		*(to++)=(unsigned char)(l>>(8*(i%BN_BYTES)))&0xff;
             ^
    621.   		}
    622.   	return(n);
