apps/ocsp.c:758: error: BUFFER_OVERRUN_L3
  Offset: [0, 5] Size: [1, +oo] by call to `free_index`.
Showing all 12 steps of the trace


apps/ocsp.c:616:15: Call
614.   
615.       if (ridx_filename && !rdb) {
616.           rdb = load_index(ridx_filename, NULL);
                     ^
617.           if (!rdb)
618.               goto end;

apps/apps.c:1575:18: Call
  1573.           goto err;
  1574.       }
  1575.       if ((tmpdb = TXT_DB_read(in, DB_NUMBER)) == NULL)
                           ^
  1576.           goto err;
  1577.   

crypto/txt_db/txt_db.c:89:5: Assignment
    87.           goto err;
    88.       ret->num_fields = num;
    89.       ret->index = NULL;
              ^
    90.       ret->qual = NULL;
    91.       if ((ret->data = sk_OPENSSL_PSTRING_new_null()) == NULL)

apps/ocsp.c:758:5: Call
756.       X509_free(rsigner);
757.       X509_free(rca_cert);
758.       free_index(rdb);
           ^
759.       BIO_free_all(cbio);
760.       BIO_free_all(acbio);

apps/apps.c:1782:1: Parameter `*db->db->index`
  1780.   }
  1781.   
  1782. > void free_index(CA_DB *db)
  1783.   {
  1784.       if (db) {

apps/apps.c:1785:9: Call
  1783.   {
  1784.       if (db) {
  1785.           TXT_DB_free(db->db);
                  ^
  1786.           OPENSSL_free(db);
  1787.       }

crypto/txt_db/txt_db.c:314:1: <Offset trace>
312.   }
313.   
314. > void TXT_DB_free(TXT_DB *db)
315.   {
316.       int i, n;

crypto/txt_db/txt_db.c:314:1: Parameter `db->num_fields`
    312.   }
    313.   
    314. > void TXT_DB_free(TXT_DB *db)
    315.   {
    316.       int i, n;

crypto/txt_db/txt_db.c:323:14: Assignment
    321.   
    322.       if (db->index != NULL) {
    323.           for (i = db->num_fields - 1; i >= 0; i--)
                        ^
    324.               lh_OPENSSL_STRING_free(db->index[i]);
    325.           OPENSSL_free(db->index);

crypto/txt_db/txt_db.c:314:1: <Length trace>
312.   }
313.   
314. > void TXT_DB_free(TXT_DB *db)
315.   {
316.       int i, n;

crypto/txt_db/txt_db.c:314:1: Parameter `*db->index`
    312.   }
    313.   
    314. > void TXT_DB_free(TXT_DB *db)
    315.   {
    316.       int i, n;

crypto/txt_db/txt_db.c:324:36: Array access: Offset: [0, 5] Size: [1, +oo] by call to `free_index` 
    322.       if (db->index != NULL) {
    323.           for (i = db->num_fields - 1; i >= 0; i--)
    324.               lh_OPENSSL_STRING_free(db->index[i]);
                                              ^
    325.           OPENSSL_free(db->index);
    326.       }
