crypto/pem/pem_seal.c:103: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `EVP_EncodeBlock`.
Showing all 8 steps of the trace


crypto/pem/pem_seal.c:74:2: Assignment
72.   	unsigned char key[EVP_MAX_KEY_LENGTH];
73.   	int ret= -1;
74.   	int i,j,max=0;
       ^
75.   	char *s=NULL;
76.   

crypto/pem/pem_seal.c:87:12: Array declaration
85.   		if (j > max) max=j;
86.   		}
87.   	s=(char *)Malloc(max*2);
                 ^
88.   	if (s == NULL)
89.   		{

crypto/pem/pem_seal.c:87:2: Assignment
85.   		if (j > max) max=j;
86.   		}
87.   	s=(char *)Malloc(max*2);
       ^
88.   	if (s == NULL)
89.   		{

crypto/pem/pem_seal.c:103:5: Call
101.   	for (i=0; i<npubk; i++)
102.   		{
103.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
           ^
104.   			RSA_size(pubk[i]->pkey.rsa));
105.   		ekl[i]=j;

crypto/evp/encode.c:188:1: <Length trace>
186.   	}
187.   
188. > int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int dlen)
189.   	{
190.   	int i,ret=0;

crypto/evp/encode.c:188:1: Parameter `*t`
  186.   	}
  187.   
  188. > int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int dlen)
  189.   	{
  190.   	int i,ret=0;

crypto/evp/encode.c:199:6: Assignment
  197.   			l=	(((unsigned long)f[0])<<16L)|
  198.   				(((unsigned long)f[1])<< 8L)|f[2];
  199.   			*(t++)=conv_bin2ascii(l>>18L);
              ^
  200.   			*(t++)=conv_bin2ascii(l>>12L);
  201.   			*(t++)=conv_bin2ascii(l>> 6L);

crypto/evp/encode.c:200:4: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `EVP_EncodeBlock` 
  198.   				(((unsigned long)f[1])<< 8L)|f[2];
  199.   			*(t++)=conv_bin2ascii(l>>18L);
  200.   			*(t++)=conv_bin2ascii(l>>12L);
            ^
  201.   			*(t++)=conv_bin2ascii(l>> 6L);
  202.   			*(t++)=conv_bin2ascii(l     );
