crypto/rsa/rsa_oaep.c:147: error: BUFFER_OVERRUN_L3
  Offset: [-3, +oo] (⇐ [-2, +oo] + -1) Size: 4 by call to `SHA1_Update`.
Showing all 6 steps of the trace


crypto/rsa/rsa_oaep.c:134:1: Array declaration
132.       }
133.   
134. > int MGF1(unsigned char *mask, long len, unsigned char *seed, long seedlen)
135.       {
136.       long i, outlen = 0;

crypto/rsa/rsa_oaep.c:147:2: Call
145.   	SHA1_Init(&c);
146.   	SHA1_Update(&c, seed, seedlen);
147.   	SHA1_Update(&c, cnt, 4);
        ^
148.   	if (outlen + SHA_DIGEST_LENGTH <= len)
149.   	    {

crypto/sha/sha1dgst.c:117:1: <Length trace>
115.   	}
116.   
117. > void SHA1_Update(SHA_CTX *c, register const unsigned char *data,
118.   	     unsigned long len)
119.   	{

crypto/sha/sha1dgst.c:117:1: Parameter `*data`
  115.   	}
  116.   
  117. > void SHA1_Update(SHA_CTX *c, register const unsigned char *data,
  118.   	     unsigned long len)
  119.   	{

crypto/sha/sha1dgst.c:270:2: Assignment
  268.   	for (sw=0; sw < ew; sw++)
  269.   		{ M_c2nl(data,l); p[sw]=l; }
  270.   	M_c2nl_p(data,l,ec);
          ^
  271.   	p[sw]=l;
  272.   	}

crypto/sha/sha1dgst.c:270:2: Array access: Offset: [-3, +oo] (⇐ [-2, +oo] + -1) Size: 4 by call to `SHA1_Update` 
  268.   	for (sw=0; sw < ew; sw++)
  269.   		{ M_c2nl(data,l); p[sw]=l; }
  270.   	M_c2nl_p(data,l,ec);
          ^
  271.   	p[sw]=l;
  272.   	}
