crypto/rsa/rsa_eay.c:306: error: BUFFER_OVERRUN_L3
  Offset: [0, 19] Size: [0, +oo] by call to `RSA_padding_check_PKCS1_OAEP`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:256:6: Call
254.   	if (ctx == NULL) goto err;
255.   
256.   	num=BN_num_bytes(rsa->n);
            ^
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)

crypto/bn/bn_lib.c:245:19: Assignment
  243.   	bn_check_top(a);
  244.   
  245.   	if (a->top == 0) return(0);
                           ^
  246.   	l=a->d[a->top-1];
  247.   	i=(a->top-1)*BN_BITS2;

crypto/rsa/rsa_eay.c:256:2: Assignment
254.   	if (ctx == NULL) goto err;
255.   
256.   	num=BN_num_bytes(rsa->n);
        ^
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)

crypto/rsa/rsa_eay.c:258:28: Array declaration
256.   	num=BN_num_bytes(rsa->n);
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
                                  ^
259.   		{
260.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:258:7: Assignment
256.   	num=BN_num_bytes(rsa->n);
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
             ^
259.   		{
260.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:306:12: Call
304.   #ifndef NO_SHA
305.           case RSA_PKCS1_OAEP_PADDING:
306.   	        r=RSA_padding_check_PKCS1_OAEP(to,num,buf,j,num,NULL,0);
                  ^
307.                   break;
308.   #endif

crypto/rsa/rsa_oaep.c:97:10: <Offset trace>
95.       
96.       MGF1(seed, SHA_DIGEST_LENGTH, maskeddb, dblen);
97.       for (i = 0; i < SHA_DIGEST_LENGTH; i++)
                ^
98.   	seed[i] ^= from[i];
99.     

crypto/rsa/rsa_oaep.c:97:10: Assignment
  95.       
  96.       MGF1(seed, SHA_DIGEST_LENGTH, maskeddb, dblen);
  97.       for (i = 0; i < SHA_DIGEST_LENGTH; i++)
                  ^
  98.   	seed[i] ^= from[i];
  99.     

crypto/rsa/rsa_oaep.c:72:1: <Length trace>
70.       }
71.   
72. > int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,
73.   	     unsigned char *from, int flen, int num, unsigned char *param,
74.   	     int plen)

crypto/rsa/rsa_oaep.c:72:1: Parameter `*from`
  70.       }
  71.   
  72. > int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,
  73.   	     unsigned char *from, int flen, int num, unsigned char *param,
  74.   	     int plen)

crypto/rsa/rsa_oaep.c:98:13: Array access: Offset: [0, 19] Size: [0, +oo] by call to `RSA_padding_check_PKCS1_OAEP` 
  96.       MGF1(seed, SHA_DIGEST_LENGTH, maskeddb, dblen);
  97.       for (i = 0; i < SHA_DIGEST_LENGTH; i++)
  98.   	seed[i] ^= from[i];
                     ^
  99.     
  100.       MGF1(db, dblen, seed, SHA_DIGEST_LENGTH);
