test/ct_test.c:379: error: BUFFER_OVERRUN_L3
  Offset: [2, +oo] Size: [1, +oo] by call to `execute_cert_test`.
Showing all 13 steps of the trace


test/ct_test.c:379:5: Call
377.       fixture.sct_dir = certs_dir;
378.       fixture.sct_text_file = "embeddedSCTs3.sct";
379.       EXECUTE_CT_TEST();
           ^
380.   }
381.   

test/ct_test.c:236:1: Parameter `fixture.tls_sct_list_len`
  234.   }
  235.   
  236. > static int execute_cert_test(CT_TEST_FIXTURE fixture)
  237.   {
  238.       int success = 0;

test/ct_test.c:329:14: Call
  327.   
  328.           tls_sct_list_len = i2o_SCT_LIST(scts, &tls_sct_list);
  329.           if (!TEST_mem_eq(fixture.tls_sct_list, fixture.tls_sct_list_len,
                      ^
  330.                            tls_sct_list, tls_sct_list_len))
  331.               goto end;

test/testutil/tests.c:310:1: Parameter `n1`
    308.   }
    309.   
    310. > int test_mem_eq(const char *file, int line, const char *st1, const char *st2,
    311.                   const void *s1, size_t n1, const void *s2, size_t n2)
    312.   {

test/testutil/tests.c:318:20: Call
    316.           return 1;
    317.       if (n1 != n2 || s1 == NULL || s2 == NULL || memcmp(s1, s2, n1) != 0) {
    318.           char *m1 = print_mem_maybe_null(s1, n1, b1);
                              ^
    319.           char *m2 = print_mem_maybe_null(s2, n2, b2);
    320.   

test/testutil/tests.c:276:1: <Offset trace>
274.    * freed by the caller.
275.    */
276. > static char *print_mem_maybe_null(const void *s, size_t n,
277.                                     char outbuf[MEM_BUFFER_SIZE])
278.   {

test/testutil/tests.c:276:1: Parameter `n`
      274.    * freed by the caller.
      275.    */
      276. > static char *print_mem_maybe_null(const void *s, size_t n,
      277.                                     char outbuf[MEM_BUFFER_SIZE])
      278.   {

test/testutil/tests.c:301:13: Assignment
      299.       }
      300.       if (pad) {
      301.           out[i++] = '.';
                         ^
      302.           out[i++] = '.';
      303.           out[i++] = '.';

test/testutil/tests.c:302:13: Assignment
      300.       if (pad) {
      301.           out[i++] = '.';
      302.           out[i++] = '.';
                         ^
      303.           out[i++] = '.';
      304.       }

test/testutil/tests.c:276:1: <Length trace>
274.    * freed by the caller.
275.    */
276. > static char *print_mem_maybe_null(const void *s, size_t n,
277.                                     char outbuf[MEM_BUFFER_SIZE])
278.   {

test/testutil/tests.c:276:1: Parameter `*outbuf`
      274.    * freed by the caller.
      275.    */
      276. > static char *print_mem_maybe_null(const void *s, size_t n,
      277.                                     char outbuf[MEM_BUFFER_SIZE])
      278.   {

test/testutil/tests.c:281:5: Assignment
      279.       size_t i;
      280.       const unsigned char *p = (const unsigned char *)s;
      281.       char *out = outbuf;
                 ^
      282.       int pad = 2 * n >= MEM_BUFFER_SIZE;
      283.   

test/testutil/tests.c:303:9: Array access: Offset: [2, +oo] Size: [1, +oo] by call to `execute_cert_test` 
      301.           out[i++] = '.';
      302.           out[i++] = '.';
      303.           out[i++] = '.';
                     ^
      304.       }
      305.       out[i] = '\0';
