crypto/dsa/dsa_gen.c:136: error: BUFFER_OVERRUN_L3
  Offset: [-3, +oo] (⇐ [-2, +oo] + -1) Size: 20 by call to `SHA1`.
Showing all 8 steps of the trace


crypto/dsa/dsa_gen.c:75:1: Array declaration
73.   #include "rand.h"
74.   
75. > DSA *DSA_generate_parameters(int bits, unsigned char *seed_in, int seed_len,
76.   	     int *counter_ret, unsigned long *h_ret, void (*callback)(),
77.   	     char *cb_arg)

crypto/dsa/dsa_gen.c:136:4: Call
134.   
135.   			/* step 2 */
136.   			HASH(seed,SHA_DIGEST_LENGTH,md);
          ^
137.   			HASH(buf,SHA_DIGEST_LENGTH,buf2);
138.   			for (i=0; i<SHA_DIGEST_LENGTH; i++)

crypto/sha/sha1_one.c:63:1: Parameter `*d`
  61.   #include "sha.h"
  62.   
  63. > unsigned char *SHA1(unsigned char *d, unsigned long n, unsigned char *md)
  64.   	{
  65.   	SHA_CTX c;

crypto/sha/sha1_one.c:70:2: Call
  68.   	if (md == NULL) md=m;
  69.   	SHA1_Init(&c);
  70.   	SHA1_Update(&c,d,n);
         ^
  71.   	SHA1_Final(md,&c);
  72.   	memset(&c,0,sizeof(c));

crypto/sha/sha1dgst.c:126:1: <Length trace>
124.   	}
125.   
126. > void SHA1_Update(SHA_CTX *c, register unsigned char *data,
127.   	     unsigned long len)
128.   	{

crypto/sha/sha1dgst.c:126:1: Parameter `*data`
    124.   	}
    125.   
    126. > void SHA1_Update(SHA_CTX *c, register unsigned char *data,
    127.   	     unsigned long len)
    128.   	{

crypto/sha/sha1dgst.c:253:2: Assignment
    251.   	for (sw=0; sw < ew; sw++)
    252.   		{ M_c2nl(data,l); p[sw]=l; }
    253.   	M_c2nl_p(data,l,ec);
            ^
    254.   	p[sw]=l;
    255.   	}

crypto/sha/sha1dgst.c:253:2: Array access: Offset: [-3, +oo] (⇐ [-2, +oo] + -1) Size: 20 by call to `SHA1` 
    251.   	for (sw=0; sw < ew; sw++)
    252.   		{ M_c2nl(data,l); p[sw]=l; }
    253.   	M_c2nl_p(data,l,ec);
            ^
    254.   	p[sw]=l;
    255.   	}
