ssl/statem/statem_srvr.c:3034: error: BUFFER_OVERRUN_L3
  Offset added: [1, 65280] Size: [8, 522240] by call to `EVP_EncryptUpdate`.
Showing all 9 steps of the trace


ssl/statem/statem_srvr.c:2941:17: Call
2939.   
2940.       /* get session encoding length */
2941.       slen_full = i2d_SSL_SESSION(s->session, NULL);
                        ^
2942.       /*
2943.        * Some length values are 16 bits, so forget it if session is too

ssl/ssl_asn1.c:195:9: Assignment
  193.   
  194.       if ((in == NULL) || ((in->cipher == NULL) && (in->cipher_id == 0)))
  195.           return 0;
                 ^
  196.   
  197.       memset(&as, 0, sizeof(as));

ssl/statem/statem_srvr.c:2941:5: Assignment
2939.   
2940.       /* get session encoding length */
2941.       slen_full = i2d_SSL_SESSION(s->session, NULL);
            ^
2942.       /*
2943.        * Some length values are 16 bits, so forget it if session is too

ssl/statem/statem_srvr.c:3034:10: Call
3032.       p += EVP_CIPHER_CTX_iv_length(&ctx);
3033.       /* Encrypt session data */
3034.       if (!EVP_EncryptUpdate(&ctx, p, &len, senc, slen))
                 ^
3035.           goto err;
3036.       p += len;

crypto/evp/evp_enc.c:289:1: <Offset trace>
287.   }
288.   
289. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
290.                         const unsigned char *in, int inl)
291.   {

crypto/evp/evp_enc.c:289:1: Parameter `inl`
  287.   }
  288.   
  289. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  290.                         const unsigned char *in, int inl)
  291.   {

crypto/evp/evp_enc.c:289:1: <Length trace>
287.   }
288.   
289. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
290.                         const unsigned char *in, int inl)
291.   {

crypto/evp/evp_enc.c:289:1: Parameter `*in`
  287.   }
  288.   
  289. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  290.                         const unsigned char *in, int inl)
  291.   {

crypto/evp/evp_enc.c:322:13: Array access: Offset added: [1, 65280] Size: [8, 522240] by call to `EVP_EncryptUpdate` 
  320.       if (i != 0) {
  321.           if (i + inl < bl) {
  322.               memcpy(&(ctx->buf[i]), in, inl);
                     ^
  323.               ctx->buf_len += inl;
  324.               *outl = 0;
