rsaref/rsaref.c:232: error: BUFFER_OVERRUN_L1
  Offset added: 65 (⇐ 1 + 64) Size: 16 by call to `RSAref_bn2bin`.
Showing all 7 steps of the trace


rsaref/rsaref.c:225:1: Parameter `to->prime[*]`
223.   #endif
224.   
225. > static int RSAref_Private_eay2ref(RSA *from, RSArefPrivateKey *to)
226.   	{
227.   	to->bits=BN_num_bits(from->n);

rsaref/rsaref.c:232:7: Call
230.   	if (!RSAref_bn2bin(from->d,to->d,RSAref_MAX_LEN)) return(0);
231.   	if (!RSAref_bn2bin(from->p,to->prime[0],RSAref_MAX_PLEN)) return(0);
232.   	if (!RSAref_bn2bin(from->q,to->prime[1],RSAref_MAX_PLEN)) return(0);
             ^
233.   	if (!RSAref_bn2bin(from->dmp1,to->pexp[0],RSAref_MAX_PLEN)) return(0);
234.   	if (!RSAref_bn2bin(from->dmq1,to->pexp[1],RSAref_MAX_PLEN)) return(0);

rsaref/rsaref.c:152:1: <Offset trace>
150.   
151.   /* unsigned char *to:  [max]    */
152. > static int RSAref_bn2bin(BIGNUM *from, unsigned char *to, int max)
153.   	{
154.   	int i;

rsaref/rsaref.c:152:1: Parameter `max`
  150.   
  151.   /* unsigned char *to:  [max]    */
  152. > static int RSAref_bn2bin(BIGNUM *from, unsigned char *to, int max)
  153.   	{
  154.   	int i;

rsaref/rsaref.c:152:1: <Length trace>
150.   
151.   /* unsigned char *to:  [max]    */
152. > static int RSAref_bn2bin(BIGNUM *from, unsigned char *to, int max)
153.   	{
154.   	int i;

rsaref/rsaref.c:152:1: Parameter `*to`
  150.   
  151.   /* unsigned char *to:  [max]    */
  152. > static int RSAref_bn2bin(BIGNUM *from, unsigned char *to, int max)
  153.   	{
  154.   	int i;

rsaref/rsaref.c:163:2: Array access: Offset added: 65 (⇐ 1 + 64) Size: 16 by call to `RSAref_bn2bin` 
  161.   		}
  162.   
  163.   	memset(to,0,(unsigned int)max);
          ^
  164.   	if (!BN_bn2bin(from,&(to[max-i])))
  165.   		return(0);
