test/cipherlist_test.c:197: error: BUFFER_OVERRUN_L1
  Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: 8 by call to `SSL_CTX_set_cipher_list`.
Showing all 13 steps of the trace


test/cipherlist_test.c:197:5: Call
195.   {
196.       SETUP_CIPHERLIST_TEST_FIXTURE();
197.       OPENSSL_assert(SSL_CTX_set_cipher_list(fixture.server, "DEFAULT"));
           ^
198.       OPENSSL_assert(SSL_CTX_set_cipher_list(fixture.client, "DEFAULT"));
199.       EXECUTE_CIPHERLIST_TEST();

ssl/ssl_lib.c:2002:1: Parameter `*str`
  2000.   
  2001.   /** specify the ciphers to be used by default by the SSL_CTX */
  2002. > int SSL_CTX_set_cipher_list(SSL_CTX *ctx, const char *str)
  2003.   {
  2004.       STACK_OF(SSL_CIPHER) *sk;

ssl/ssl_lib.c:2006:10: Call
  2004.       STACK_OF(SSL_CIPHER) *sk;
  2005.   
  2006.       sk = ssl_create_cipher_list(ctx->method, &ctx->cipher_list,
                   ^
  2007.                                   &ctx->cipher_list_by_id, str, ctx->cert);
  2008.       /*

ssl/ssl_ciph.c:1306:1: Parameter `*rule_str`
    1304.   #endif
    1305.   
    1306. > STACK_OF(SSL_CIPHER) *ssl_create_cipher_list(const SSL_METHOD *ssl_method, STACK_OF(SSL_CIPHER)
    1307.                                                **cipher_list, STACK_OF(SSL_CIPHER)
    1308.                                                **cipher_list_by_id,

ssl/ssl_ciph.c:1324:10: Call
    1322.           return NULL;
    1323.   #ifndef OPENSSL_NO_EC
    1324.       if (!check_suiteb_cipher_list(ssl_method, c, &rule_str))
                     ^
    1325.           return NULL;
    1326.   #endif

ssl/ssl_ciph.c:1252:1: Parameter `**prule_str`
      1250.   
      1251.   #ifndef OPENSSL_NO_EC
      1252. > static int check_suiteb_cipher_list(const SSL_METHOD *meth, CERT *c,
      1253.                                       const char **prule_str)
      1254.   {

ssl/ssl_ciph.c:1477:5: Assignment
    1475.        */
    1476.       ok = 1;
    1477.       rule_p = rule_str;
                ^
    1478.       if (strncmp(rule_str, "DEFAULT", 7) == 0) {
    1479.           ok = ssl_cipher_process_rulestr(SSL_DEFAULT_CIPHER_LIST,

ssl/ssl_ciph.c:1487:14: Call
    1485.   
    1486.       if (ok && (strlen(rule_p) > 0))
    1487.           ok = ssl_cipher_process_rulestr(rule_p, &head, &tail, ca_list, c);
                         ^
    1488.   
    1489.       OPENSSL_free(ca_list);      /* Not needed anymore */

ssl/ssl_ciph.c:996:1: <Length trace>
994.   }
995.   
996. > static int ssl_cipher_process_rulestr(const char *rule_str,
997.                                         CIPHER_ORDER **head_p,
998.                                         CIPHER_ORDER **tail_p,

ssl/ssl_ciph.c:996:1: Parameter `*rule_str`
      994.   }
      995.   
      996. > static int ssl_cipher_process_rulestr(const char *rule_str,
      997.                                         CIPHER_ORDER **head_p,
      998.                                         CIPHER_ORDER **tail_p,

ssl/ssl_ciph.c:1009:5: Assignment
      1007.   
      1008.       retval = 1;
      1009.       l = rule_str;
                  ^
      1010.       for (;;) {
      1011.           ch = *l;

ssl/ssl_ciph.c:1045:13: Assignment
      1043.           for (;;) {
      1044.               ch = *l;
      1045.               buf = l;
                          ^
      1046.               buflen = 0;
      1047.   #ifndef CHARSET_EBCDIC

ssl/ssl_ciph.c:1215:29: Array access: Offset: [9, +oo] (⇐ [0, +oo] + 9) Size: 8 by call to `SSL_CTX_set_cipher_list` 
      1213.                   ok = ssl_cipher_strength_sort(head_p, tail_p);
      1214.               else if (buflen == 10 && strncmp(buf, "SECLEVEL=", 9) == 0) {
      1215.                   int level = buf[9] - '0';
                                          ^
      1216.                   if (level < 0 || level > 5) {
      1217.                       SSLerr(SSL_F_SSL_CIPHER_PROCESS_RULESTR,
