crypto/dsa/dsa_gen.c:137: error: BUFFER_OVERRUN_L3
  Offset: [-3, +oo] (⇐ [-2, +oo] + -1) Size: 20 by call to `SHA1`.
Showing all 8 steps of the trace


crypto/dsa/dsa_gen.c:76:1: Array declaration
74.   #include <openssl/rand.h>
75.   
76. > DSA *DSA_generate_parameters(int bits, unsigned char *seed_in, int seed_len,
77.   	     int *counter_ret, unsigned long *h_ret, void (*callback)(),
78.   	     char *cb_arg)

crypto/dsa/dsa_gen.c:137:4: Call
135.   
136.   			/* step 2 */
137.   			HASH(seed,SHA_DIGEST_LENGTH,md);
          ^
138.   			HASH(buf,SHA_DIGEST_LENGTH,buf2);
139.   			for (i=0; i<SHA_DIGEST_LENGTH; i++)

crypto/sha/sha1_one.c:64:1: Parameter `*d`
  62.   
  63.   #ifndef NO_SHA1
  64. > unsigned char *SHA1(const unsigned char *d, unsigned long n, unsigned char *md)
  65.   	{
  66.   	SHA_CTX c;

crypto/sha/sha1_one.c:71:2: Call
  69.   	if (md == NULL) md=m;
  70.   	SHA1_Init(&c);
  71.   	SHA1_Update(&c,d,n);
         ^
  72.   	SHA1_Final(md,&c);
  73.   	memset(&c,0,sizeof(c));

crypto/sha/sha1dgst.c:117:1: <Length trace>
115.   	}
116.   
117. > void SHA1_Update(SHA_CTX *c, const register unsigned char *data,
118.   	     unsigned long len)
119.   	{

crypto/sha/sha1dgst.c:117:1: Parameter `*data`
    115.   	}
    116.   
    117. > void SHA1_Update(SHA_CTX *c, const register unsigned char *data,
    118.   	     unsigned long len)
    119.   	{

crypto/sha/sha1dgst.c:244:2: Assignment
    242.   	for (sw=0; sw < ew; sw++)
    243.   		{ M_c2nl(data,l); p[sw]=l; }
    244.   	M_c2nl_p(data,l,ec);
            ^
    245.   	p[sw]=l;
    246.   	}

crypto/sha/sha1dgst.c:244:2: Array access: Offset: [-3, +oo] (⇐ [-2, +oo] + -1) Size: 20 by call to `SHA1` 
    242.   	for (sw=0; sw < ew; sw++)
    243.   		{ M_c2nl(data,l); p[sw]=l; }
    244.   	M_c2nl_p(data,l,ec);
            ^
    245.   	p[sw]=l;
    246.   	}
