ssl/statem/statem_clnt.c:2752: error: BUFFER_OVERRUN_L3
  Offset: 3 Size: [1, 118] by call to `ssl_log_rsa_client_key_exchange`.
Showing all 13 steps of the trace


ssl/statem/statem_clnt.c:2702:5: Assignment
2700.       }
2701.   
2702.       pmslen = SSL_MAX_MASTER_KEY_LENGTH;
            ^
2703.       pms = OPENSSL_malloc(pmslen);
2704.       if (pms == NULL) {

ssl/statem/statem_clnt.c:2752:10: Call
2750.   
2751.       /* Log the premaster secret, if logging is enabled. */
2752.       if (!ssl_log_rsa_client_key_exchange(s, encdata, enclen, pms, pmslen))
                 ^
2753.           goto err;
2754.   

ssl/ssl_lib.c:4372:1: Parameter `premaster_len`
  4370.   }
  4371.   
  4372. > int ssl_log_rsa_client_key_exchange(SSL *ssl,
  4373.                                       const uint8_t *encrypted_premaster,
  4374.                                       size_t encrypted_premaster_len,

ssl/ssl_lib.c:4384:12: Call
  4382.   
  4383.       /* We only want the first 8 bytes of the encrypted premaster as a tag. */
  4384.       return nss_keylog_int("RSA",
                     ^
  4385.                             ssl,
  4386.                             encrypted_premaster,

ssl/ssl_lib.c:4320:1: <Offset trace>
4318.   }
4319.   
4320. > static int nss_keylog_int(const char *prefix,
4321.                             SSL *ssl,
4322.                             const uint8_t *parameter_1,

ssl/ssl_lib.c:4320:1: Parameter `prefix->strlen`
    4318.   }
    4319.   
    4320. > static int nss_keylog_int(const char *prefix,
    4321.                             SSL *ssl,
    4322.                             const uint8_t *parameter_1,

ssl/ssl_lib.c:4320:1: <Length trace>
4318.   }
4319.   
4320. > static int nss_keylog_int(const char *prefix,
4321.                             SSL *ssl,
4322.                             const uint8_t *parameter_1,

ssl/ssl_lib.c:4320:1: Parameter `parameter_2_len`
    4318.   }
    4319.   
    4320. > static int nss_keylog_int(const char *prefix,
    4321.                             SSL *ssl,
    4322.                             const uint8_t *parameter_1,

ssl/ssl_lib.c:4344:5: Assignment
    4342.        */
    4343.       prefix_len = strlen(prefix);
    4344.       out_len = prefix_len + (2*parameter_1_len) + (2*parameter_2_len) + 3;
                ^
    4345.       if ((out = cursor = OPENSSL_malloc(out_len)) == NULL) {
    4346.           SSLerr(SSL_F_NSS_KEYLOG_INT, ERR_R_MALLOC_FAILURE);

ssl/ssl_lib.c:4345:25: Call
    4343.       prefix_len = strlen(prefix);
    4344.       out_len = prefix_len + (2*parameter_1_len) + (2*parameter_2_len) + 3;
    4345.       if ((out = cursor = OPENSSL_malloc(out_len)) == NULL) {
                                    ^
    4346.           SSLerr(SSL_F_NSS_KEYLOG_INT, ERR_R_MALLOC_FAILURE);
    4347.           return 0;

crypto/mem.c:166:9: Assignment
      164.   
      165.       if (num == 0)
      166.           return NULL;
                     ^
      167.   
      168.       FAILTEST();

ssl/ssl_lib.c:4345:16: Assignment
    4343.       prefix_len = strlen(prefix);
    4344.       out_len = prefix_len + (2*parameter_1_len) + (2*parameter_2_len) + 3;
    4345.       if ((out = cursor = OPENSSL_malloc(out_len)) == NULL) {
                           ^
    4346.           SSLerr(SSL_F_NSS_KEYLOG_INT, ERR_R_MALLOC_FAILURE);
    4347.           return 0;

ssl/ssl_lib.c:4350:5: Array access: Offset: 3 Size: [1, 118] by call to `ssl_log_rsa_client_key_exchange` 
    4348.       }
    4349.   
    4350.       strcpy(cursor, prefix);
                ^
    4351.       cursor += prefix_len;
    4352.       *cursor++ = ' ';
