crypto/rsa/rsa_pmeth.c:295: error: BUFFER_OVERRUN_L3
  Offset: [-1, +oo] (⇐ [0, 1] + [-1, +oo]) Size: [1, +oo] by call to `RSA_verify_PKCS1_PSS_mgf1`.
Showing all 8 steps of the trace


crypto/rsa/rsa_pmeth.c:289:18: Call
287.           } else if (rctx->pad_mode == RSA_PKCS1_PSS_PADDING) {
288.               int ret;
289.               if (!setup_tbuf(rctx, ctx))
                        ^
290.                   return -1;
291.               ret = RSA_public_decrypt(siglen, sig, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:139:1: Parameter `*ctx->tbuf`
  137.   }
  138.   
  139. > static int setup_tbuf(RSA_PKEY_CTX *ctx, EVP_PKEY_CTX *pk)
  140.   {
  141.       if (ctx->tbuf)

crypto/rsa/rsa_pmeth.c:295:19: Call
293.               if (ret <= 0)
294.                   return 0;
295.               ret = RSA_verify_PKCS1_PSS_mgf1(rsa, tbs,
                         ^
296.                                               rctx->md, rctx->mgf1md,
297.                                               rctx->tbuf, rctx->saltlen);

crypto/rsa/rsa_pss.c:82:1: <Offset trace>
80.   }
81.   
82. > int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,
83.                                 const EVP_MD *Hash, const EVP_MD *mgf1Hash,
84.                                 const unsigned char *EM, int sLen)

crypto/rsa/rsa_pss.c:82:1: Parameter `sLen`
  80.   }
  81.   
  82. > int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,
  83.                                 const EVP_MD *Hash, const EVP_MD *mgf1Hash,
  84.                                 const unsigned char *EM, int sLen)

crypto/rsa/rsa_pss.c:82:1: <Length trace>
80.   }
81.   
82. > int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,
83.                                 const EVP_MD *Hash, const EVP_MD *mgf1Hash,
84.                                 const unsigned char *EM, int sLen)

crypto/rsa/rsa_pss.c:82:1: Parameter `*EM`
  80.   }
  81.   
  82. > int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,
  83.                                 const EVP_MD *Hash, const EVP_MD *mgf1Hash,
  84.                                 const unsigned char *EM, int sLen)

crypto/rsa/rsa_pss.c:133:9: Array access: Offset: [-1, +oo] (⇐ [0, 1] + [-1, +oo]) Size: [1, +oo] by call to `RSA_verify_PKCS1_PSS_mgf1` 
  131.           goto err;
  132.       }
  133.       if (EM[emLen - 1] != 0xbc) {
                 ^
  134.           RSAerr(RSA_F_RSA_VERIFY_PKCS1_PSS_MGF1, RSA_R_LAST_OCTET_INVALID);
  135.           goto err;
