crypto/srp/srp_vfy.c:580: error: BUFFER_OVERRUN_L3
  Offset: [-2, +oo] Size: 2500 by call to `t_tob64`.
Showing all 7 steps of the trace


crypto/srp/srp_vfy.c:526:1: Array declaration
524.      create a verifier (*salt,*verifier,g and N are in base64)
525.   */
526. > char *SRP_create_verifier(const char *user, const char *pass, char **salt,
527.   						  char **verifier, const char *N, const char *g)
528.   	{

crypto/srp/srp_vfy.c:580:2: Call
578.   	if (((vf = OPENSSL_malloc(BN_num_bytes(v)*2)) == NULL))
579.   		goto err;
580.   	t_tob64(vf, tmp, BN_num_bytes(v));
        ^
581.   
582.   	*verifier = vf;

crypto/srp/srp_vfy.c:126:1: <Offset trace>
124.    * Convert a raw byte string into a null-terminated base64 ASCII string.
125.    */
126. > static char *t_tob64(char *dst, const unsigned char *src, int size)
127.   	{
128.   	int c, pos = size % 3;

crypto/srp/srp_vfy.c:126:1: Parameter `size`
  124.    * Convert a raw byte string into a null-terminated base64 ASCII string.
  125.    */
  126. > static char *t_tob64(char *dst, const unsigned char *src, int size)
  127.   	{
  128.   	int c, pos = size % 3;

crypto/srp/srp_vfy.c:126:1: <Length trace>
124.    * Convert a raw byte string into a null-terminated base64 ASCII string.
125.    */
126. > static char *t_tob64(char *dst, const unsigned char *src, int size)
127.   	{
128.   	int c, pos = size % 3;

crypto/srp/srp_vfy.c:126:1: Parameter `*src`
  124.    * Convert a raw byte string into a null-terminated base64 ASCII string.
  125.    */
  126. > static char *t_tob64(char *dst, const unsigned char *src, int size)
  127.   	{
  128.   	int c, pos = size % 3;

crypto/srp/srp_vfy.c:172:9: Array access: Offset: [-2, +oo] Size: 2500 by call to `t_tob64` 
  170.   		else
  171.   			{
  172.   			b0 = src[pos++];
                 ^
  173.   			b1 = src[pos++];
  174.   			b2 = src[pos++];
