apps/ts.c:612: error: BUFFER_OVERRUN_L2
  Offset added: [-oo, 40] (⇐ [0, 20] + [-oo, 20]) Size: 20.
Showing all 6 steps of the trace


apps/ts.c:604:10: <Offset trace>
602.   
603.       /* Find the first non-zero byte and creating ASN1_INTEGER object. */
604.       for (i = 0; i < len && !buf[i]; ++i)
                ^
605.           continue;
606.       if ((nonce = ASN1_INTEGER_new()) == NULL)

apps/ts.c:604:10: Assignment
602.   
603.       /* Find the first non-zero byte and creating ASN1_INTEGER object. */
604.       for (i = 0; i < len && !buf[i]; ++i)
                ^
605.           continue;
606.       if ((nonce = ASN1_INTEGER_new()) == NULL)

apps/ts.c:610:5: Assignment
608.       OPENSSL_free(nonce->data);
609.       /* Allocate at least one byte. */
610.       nonce->length = len - i;
           ^
611.       nonce->data = app_malloc(nonce->length + 1, "nonce buffer");
612.       memcpy(nonce->data, buf + i, nonce->length);

apps/ts.c:590:1: <Length trace>
588.   }
589.   
590. > static ASN1_INTEGER *create_nonce(int bits)
591.   {
592.       unsigned char buf[20];

apps/ts.c:590:1: Array declaration
588.   }
589.   
590. > static ASN1_INTEGER *create_nonce(int bits)
591.   {
592.       unsigned char buf[20];

apps/ts.c:612:5: Array access: Offset added: [-oo, 40] (⇐ [0, 20] + [-oo, 20]) Size: 20
610.       nonce->length = len - i;
611.       nonce->data = app_malloc(nonce->length + 1, "nonce buffer");
612.       memcpy(nonce->data, buf + i, nonce->length);
           ^
613.   
614.       return nonce;
