crypto/x509v3/v3_utl.c:128: error: BUFFER_OVERRUN_L3
  Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, +oo] by call to `BN_bn2dec`.
Showing all 13 steps of the trace


crypto/x509v3/v3_utl.c:127:15: Call
125.   	char *strtmp = NULL;
126.   	if(!a) return NULL;
127.   	if(!(bntmp = ASN1_ENUMERATED_to_BN(a, NULL)) ||
                     ^
128.   	    !(strtmp = BN_bn2dec(bntmp)) )
129.   		X509V3err(X509V3_F_I2S_ASN1_ENUMERATED,ERR_R_MALLOC_FAILURE);

crypto/asn1/a_enum.c:318:1: Parameter `*bn->d`
  316.   	}
  317.   
  318. > BIGNUM *ASN1_ENUMERATED_to_BN(ASN1_ENUMERATED *ai, BIGNUM *bn)
  319.   	{
  320.   	BIGNUM *ret;

crypto/asn1/a_enum.c:322:11: Call
  320.   	BIGNUM *ret;
  321.   
  322.   	if ((ret=BN_bin2bn(ai->data,ai->length,bn)) == NULL)
                   ^
  323.   		ASN1err(ASN1_F_ASN1_ENUMERATED_TO_BN,ASN1_R_BN_LIB);
  324.   	if(ai->type == V_ASN1_NEG_ENUMERATED) bn->neg = 1;

crypto/bn/bn_lib.c:595:1: Parameter `*ret->d`
    593.   
    594.   /* ignore negative */
    595. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
    596.   	{
    597.   	unsigned int i,m;

crypto/x509v3/v3_utl.c:128:17: Call
126.   	if(!a) return NULL;
127.   	if(!(bntmp = ASN1_ENUMERATED_to_BN(a, NULL)) ||
128.   	    !(strtmp = BN_bn2dec(bntmp)) )
                       ^
129.   		X509V3err(X509V3_F_I2S_ASN1_ENUMERATED,ERR_R_MALLOC_FAILURE);
130.   	BN_free(bntmp);

crypto/bn/bn_print.c:103:1: Parameter `*a->d`
  101.   
  102.   /* Must 'Free' the returned data */
  103. > char *BN_bn2dec(BIGNUM *a)
  104.   	{
  105.   	int i=0,num;

crypto/bn/bn_print.c:120:9: Call
  118.   		goto err;
  119.   		}
  120.   	if ((t=BN_dup(a)) == NULL) goto err;
                 ^
  121.   
  122.   	p=buf;

crypto/bn/bn_lib.c:488:1: Parameter `*a->d`
    486.   	}
    487.   
    488. > BIGNUM *BN_dup(BIGNUM *a)
    489.   	{
    490.   	BIGNUM *r;

crypto/bn/bn_lib.c:496:19: Call
    494.   	r=BN_new();
    495.   	if (r == NULL) return(NULL);
    496.   	return((BIGNUM *)BN_copy(r,a));
                             ^
    497.   	}
    498.   

crypto/bn/bn_lib.c:499:1: <Length trace>
497.   	}
498.   
499. > BIGNUM *BN_copy(BIGNUM *a, BIGNUM *b)
500.   	{
501.   	int i;

crypto/bn/bn_lib.c:499:1: Parameter `*b->d`
      497.   	}
      498.   
      499. > BIGNUM *BN_copy(BIGNUM *a, BIGNUM *b)
      500.   	{
      501.   	int i;

crypto/bn/bn_lib.c:512:2: Assignment
      510.   #if 1
      511.   	A=a->d;
      512.   	B=b->d;
              ^
      513.   	for (i=b->top>>2; i>0; i--,A+=4,B+=4)
      514.   		{

crypto/bn/bn_lib.c:516:33: Array access: Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, +oo] by call to `BN_bn2dec` 
      514.   		{
      515.   		BN_ULONG a0,a1,a2,a3;
      516.   		a0=B[0]; a1=B[1]; a2=B[2]; a3=B[3];
                                             ^
      517.   		A[0]=a0; A[1]=a1; A[2]=a2; A[3]=a3;
      518.   		}
