ssl/s3_clnt.c:1237: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `d2i_X509_NAME`.
Showing all 13 steps of the trace


ssl/s3_clnt.c:1237:11: Call
1235.   		q=p;
1236.   
1237.   		if ((xn=d2i_X509_NAME(NULL,&q,l)) == NULL)
                  ^
1238.   			{
1239.   			/* If netscape tollerance is on, ignore errors */

crypto/asn1/x_name.c:186:1: Parameter `*(*a)->entries->data`
  184.   	}
  185.   
  186. > X509_NAME *d2i_X509_NAME(X509_NAME **a, unsigned char **pp, long length)
  187.   	{
  188.   	int set=0,i;

ssl/s3_clnt.c:1237:11: Call
1235.   		q=p;
1236.   
1237.   		if ((xn=d2i_X509_NAME(NULL,&q,l)) == NULL)
                  ^
1238.   			{
1239.   			/* If netscape tollerance is on, ignore errors */

crypto/asn1/x_name.c:186:1: Parameter `*(*a)->entries->data`
  184.   	}
  185.   
  186. > X509_NAME *d2i_X509_NAME(X509_NAME **a, unsigned char **pp, long length)
  187.   	{
  188.   	int set=0,i;

crypto/asn1/x_name.c:198:5: Call
  196.   		while (sk_num(ret->entries) > 0)
  197.   			X509_NAME_ENTRY_free((X509_NAME_ENTRY *)
  198.   				sk_pop(ret->entries));
             ^
  199.   		}
  200.   

crypto/stack/stack.c:256:1: Parameter `*st->data`
    254.   	}
    255.   
    256. > char *sk_pop(STACK *st)
    257.   	{
    258.   	if (st == NULL) return(NULL);

crypto/stack/stack.c:260:9: Call
    258.   	if (st == NULL) return(NULL);
    259.   	if (st->num <= 0) return(NULL);
    260.   	return(sk_delete(st,st->num-1));
                   ^
    261.   	}
    262.   

crypto/stack/stack.c:186:1: <Offset trace>
184.   	}
185.   
186. > char *sk_delete(STACK *st, int loc)
187.   	{
188.   	char *ret;

crypto/stack/stack.c:186:1: Parameter `loc`
      184.   	}
      185.   
      186. > char *sk_delete(STACK *st, int loc)
      187.   	{
      188.   	char *ret;

crypto/stack/stack.c:196:3: Assignment
      194.   	if (loc != st->num-1)
      195.   		{
      196.   		j=st->num-1;
               ^
      197.   		for (i=loc; i<j; i++)
      198.   			st->data[i]=st->data[i+1];

crypto/stack/stack.c:186:1: <Length trace>
184.   	}
185.   
186. > char *sk_delete(STACK *st, int loc)
187.   	{
188.   	char *ret;

crypto/stack/stack.c:186:1: Parameter `*st->data`
      184.   	}
      185.   
      186. > char *sk_delete(STACK *st, int loc)
      187.   	{
      188.   	char *ret;

crypto/stack/stack.c:198:16: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `d2i_X509_NAME` 
      196.   		j=st->num-1;
      197.   		for (i=loc; i<j; i++)
      198.   			st->data[i]=st->data[i+1];
                            ^
      199.   		/* In theory memcpy is not safe for this
      200.   		 * memcpy( &(st->data[loc]),
