ssl/t1_lib.c:2343: error: BUFFER_OVERRUN_L2
  Offset: [0, 6] Size: 6.
Showing all 5 steps of the trace


ssl/t1_lib.c:2309:21: <Offset trace>
2307.                   /* Work out which GOST certificate is available */
2308.                   if (ssl_has_cert(s, SSL_PKEY_GOST12_512)) {
2309.                       idx = SSL_PKEY_GOST12_512;
                            ^
2310.                   } else if (ssl_has_cert(s, SSL_PKEY_GOST12_256)) {
2311.                       idx = SSL_PKEY_GOST12_256;

ssl/t1_lib.c:2309:21: Assignment
2307.                   /* Work out which GOST certificate is available */
2308.                   if (ssl_has_cert(s, SSL_PKEY_GOST12_512)) {
2309.                       idx = SSL_PKEY_GOST12_512;
                            ^
2310.                   } else if (ssl_has_cert(s, SSL_PKEY_GOST12_256)) {
2311.                       idx = SSL_PKEY_GOST12_256;

ssl/t1_lib.c:2246:1: <Length trace>
2244.    * to the server. In this case no error is set.
2245.    */
2246. > int tls_choose_sigalg(SSL *s, int *al)
2247.   {
2248.       int idx = -1;

ssl/t1_lib.c:2246:1: Parameter `s->cert->pkeys[*]`
2244.    * to the server. In this case no error is set.
2245.    */
2246. > int tls_choose_sigalg(SSL *s, int *al)
2247.   {
2248.       int idx = -1;

ssl/t1_lib.c:2343:55: Array access: Offset: [0, 6] Size: 6
2341.                   /* For Suite B need to match signature algorithm to curve */
2342.                   if (tls1_suiteb(s)) {
2343.                       EC_KEY *ec = EVP_PKEY_get0_EC_KEY(s->cert->pkeys[idx].privatekey);
                                                              ^
2344.                       curve = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));
2345.                   } else {
