ssl/s3_cbc.c:670: error: BUFFER_OVERRUN_L2
  Offset: [-72, 79] Size: 16.
Showing all 5 steps of the trace


ssl/s3_cbc.c:413:2: <Offset trace>
411.   	void (*md_final_raw)(void *ctx, unsigned char *md_out);
412.   	void (*md_transform)(void *ctx, const unsigned char *block);
413.   	unsigned md_size, md_block_size = 64;
        ^
414.   	unsigned sslv3_pad_length = 40, header_length, variance_blocks,
415.   		 len, max_mac_bytes, num_blocks,

ssl/s3_cbc.c:413:2: Assignment
411.   	void (*md_final_raw)(void *ctx, unsigned char *md_out);
412.   	void (*md_transform)(void *ctx, const unsigned char *block);
413.   	unsigned md_size, md_block_size = 64;
        ^
414.   	unsigned sslv3_pad_length = 40, header_length, variance_blocks,
415.   		 len, max_mac_bytes, num_blocks,

ssl/s3_cbc.c:397:1: <Length trace>
395.    * a padding byte and MAC. (If the padding was invalid, it might contain the
396.    * padding too. ) */
397. > void ssl3_cbc_digest_record(
398.   	const EVP_MD_CTX *ctx,
399.   	unsigned char* md_out,

ssl/s3_cbc.c:397:1: Array declaration
395.    * a padding byte and MAC. (If the padding was invalid, it might contain the
396.    * padding too. ) */
397. > void ssl3_cbc_digest_record(
398.   	const EVP_MD_CTX *ctx,
399.   	unsigned char* md_out,

ssl/s3_cbc.c:670:18: Array access: Offset: [-72, 79] Size: 16
668.   				/* If this is index_b, write a length byte. */
669.   				b = constant_time_select_8(
670.   					is_block_b, length_bytes[j-(md_block_size-md_length_size)], b);
                        ^
671.   				}
672.   			block[j] = b;
