crypto/rc2/rc2_skey.c:136: error: BUFFER_OVERRUN_L3
  Offset: [-1, 126] Size: 256.
Showing all 6 steps of the trace


crypto/rc2/rc2_skey.c:135:7: <Offset trace>
133.   	/* copy from bytes into RC2_INT's */
134.   	ki= &(key->data[63]);
135.   	for (i=127; i>=0; i-=2)
             ^
136.   		*(ki--)=((k[i]<<8)|k[i-1])&0xffff;
137.   	}

crypto/rc2/rc2_skey.c:135:7: Assignment
133.   	/* copy from bytes into RC2_INT's */
134.   	ki= &(key->data[63]);
135.   	for (i=127; i>=0; i-=2)
             ^
136.   		*(ki--)=((k[i]<<8)|k[i-1])&0xffff;
137.   	}

crypto/rc2/rc2_skey.c:93:1: <Length trace>
91.    * the same as specifying 1024 for the 'bits' parameter.  Bsafe uses
92.    * a version where the bits parameter is the same as len*8 */
93. > void RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits)
94.   	{
95.   	int i,j;

crypto/rc2/rc2_skey.c:93:1: Parameter `key->data[*]`
91.    * the same as specifying 1024 for the 'bits' parameter.  Bsafe uses
92.    * a version where the bits parameter is the same as len*8 */
93. > void RC2_set_key(RC2_KEY *key, int len, const unsigned char *data, int bits)
94.   	{
95.   	int i,j;

crypto/rc2/rc2_skey.c:100:2: Assignment
98.   	unsigned int c,d;
99.   
100.   	k= (unsigned char *)&(key->data[0]);
        ^
101.   	*k=0; /* for if there is a zero length key */
102.   

crypto/rc2/rc2_skey.c:136:22: Array access: Offset: [-1, 126] Size: 256
134.   	ki= &(key->data[63]);
135.   	for (i=127; i>=0; i-=2)
136.   		*(ki--)=((k[i]<<8)|k[i-1])&0xffff;
                            ^
137.   	}
138.   
