ssl/ssl_rsa.c:815: error: BUFFER_OVERRUN_L3
  Offset added: [48, +oo] (⇐ [0, +oo] + 48) Size: [1, +oo] by call to `SSL_CTX_add_server_custom_ext`.
Showing all 10 steps of the trace


ssl/ssl_rsa.c:782:1: Parameter `ctx->cert->srv_ext.meths_count`
780.    * the included extensions.
781.    */
782. > static int serverinfo_process_buffer(const unsigned char *serverinfo,
783.                                        size_t serverinfo_length, SSL_CTX *ctx)
784.   {

ssl/ssl_rsa.c:815:35: Call
813.               }
814.   
815.               if (!have_ext_cbs && !SSL_CTX_add_server_custom_ext(ctx, ext_type,
                                         ^
816.                                                                   serverinfo_srv_add_cb,
817.                                                                   NULL, NULL,

ssl/t1_ext.c:231:1: Parameter `ctx->cert->srv_ext.meths_count`
  229.   }
  230.   
  231. > int SSL_CTX_add_server_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
  232.                                     custom_ext_add_cb add_cb,
  233.                                     custom_ext_free_cb free_cb,

ssl/t1_ext.c:237:12: Call
  235.                                     custom_ext_parse_cb parse_cb, void *parse_arg)
  236.   {
  237.       return custom_ext_meth_add(&ctx->cert->srv_ext, ext_type,
                    ^
  238.                                  add_cb, free_cb, add_arg, parse_cb, parse_arg);
  239.   }

ssl/t1_ext.c:154:1: <Length trace>
152.   
153.   /* Set callbacks for a custom extension. */
154. > static int custom_ext_meth_add(custom_ext_methods *exts,
155.                                  unsigned int ext_type,
156.                                  custom_ext_add_cb add_cb,

ssl/t1_ext.c:154:1: Parameter `exts->meths_count`
    152.   
    153.   /* Set callbacks for a custom extension. */
    154. > static int custom_ext_meth_add(custom_ext_methods *exts,
    155.                                  unsigned int ext_type,
    156.                                  custom_ext_add_cb add_cb,

ssl/t1_ext.c:179:9: Call
    177.           return 0;
    178.       /* Search for duplicate */
    179.       if (custom_ext_find(exts, ext_type))
                   ^
    180.           return 0;
    181.       tmp = OPENSSL_realloc(exts->meths,

ssl/t1_ext.c:16:1: Parameter `exts->meths_count`
      14.   
      15.   /* Find a custom extension from the list. */
      16. > static custom_ext_method *custom_ext_find(const custom_ext_methods *exts,
      17.                                             unsigned int ext_type)
      18.   {

ssl/t1_ext.c:192:5: Assignment
    190.   
    191.       exts->meths = tmp;
    192.       meth = exts->meths + exts->meths_count;
               ^
    193.       memset(meth, 0, sizeof(*meth));
    194.       meth->parse_cb = parse_cb;

ssl/t1_ext.c:193:5: Array access: Offset added: [48, +oo] (⇐ [0, +oo] + 48) Size: [1, +oo] by call to `SSL_CTX_add_server_custom_ext` 
    191.       exts->meths = tmp;
    192.       meth = exts->meths + exts->meths_count;
    193.       memset(meth, 0, sizeof(*meth));
               ^
    194.       meth->parse_cb = parse_cb;
    195.       meth->add_cb = add_cb;
