crypto/pem/pem_seal.c:105: error: BUFFER_OVERRUN_L3
  Offset added: [1, +oo] Size: [0, +oo].
Showing all 10 steps of the trace


crypto/pem/pem_seal.c:102:5: <Offset trace>
100.   	for (i=0; i<npubk; i++)
101.   		{
102.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
           ^
103.   			RSA_size(pubk[i]->pkey.rsa));
104.   		ekl[i]=j;

crypto/pem/pem_seal.c:102:5: Call
100.   	for (i=0; i<npubk; i++)
101.   		{
102.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
           ^
103.   			RSA_size(pubk[i]->pkey.rsa));
104.   		ekl[i]=j;

crypto/evp/encode.c:179:2: Assignment
  177.   int EVP_EncodeBlock(unsigned char *t, unsigned char *f, int dlen)
  178.   	{
  179.   	int i,ret=0;
          ^
  180.   	unsigned long l;
  181.   

crypto/evp/encode.c:208:2: Assignment
  206.   
  207.   	*t='\0';
  208.   	return(ret);
          ^
  209.   	}
  210.   

crypto/pem/pem_seal.c:102:3: Assignment
100.   	for (i=0; i<npubk; i++)
101.   		{
102.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
         ^
103.   			RSA_size(pubk[i]->pkey.rsa));
104.   		ekl[i]=j;

crypto/pem/pem_seal.c:73:2: <Length trace>
71.   	unsigned char key[EVP_MAX_KEY_LENGTH];
72.   	int ret= -1;
73.   	int i,j,max=0;
       ^
74.   	char *s=NULL;
75.   

crypto/pem/pem_seal.c:73:2: Assignment
71.   	unsigned char key[EVP_MAX_KEY_LENGTH];
72.   	int ret= -1;
73.   	int i,j,max=0;
       ^
74.   	char *s=NULL;
75.   

crypto/pem/pem_seal.c:86:12: Array declaration
84.   		if (j > max) max=j;
85.   		}
86.   	s=(char *)Malloc(max*2);
                 ^
87.   	if (s == NULL)
88.   		{

crypto/pem/pem_seal.c:86:2: Assignment
84.   		if (j > max) max=j;
85.   		}
86.   	s=(char *)Malloc(max*2);
       ^
87.   	if (s == NULL)
88.   		{

crypto/pem/pem_seal.c:105:3: Array access: Offset added: [1, +oo] Size: [0, +oo]
103.   			RSA_size(pubk[i]->pkey.rsa));
104.   		ekl[i]=j;
105.   		memcpy(ek[i],s,j+1);
         ^
106.   		}
107.   
