apps/passwd.c:258: error: BUFFER_OVERRUN_L3
  Offset: [0, 16] Size: [1, 17] by call to `do_passwd`.
Showing all 7 steps of the trace


apps/passwd.c:85:5: Assignment
83.   {
84.       BIO *in = NULL;
85.       char *infile = NULL, *salt = NULL, *passwd = NULL, **passwds = NULL;
          ^
86.       char *salt_malloc = NULL, *passwd_malloc = NULL, *prog;
87.       OPTION_CHOICE o;

apps/passwd.c:258:18: Call
256.           do {                    /* loop over list of passwords */
257.               passwd = *passwds++;
258.               if (!do_passwd(passed_salt, &salt, &salt_malloc, passwd, bio_out,
                        ^
259.                              quiet, table, reverse, pw_maxlen, mode))
260.                   goto end;

apps/passwd.c:784:9: <Offset trace>
782.       /* first make sure we have a salt */
783.       if (!passed_salt) {
784.           size_t saltlen = 0;
               ^
785.           size_t i;
786.   

apps/passwd.c:784:9: Assignment
  782.       /* first make sure we have a salt */
  783.       if (!passed_salt) {
  784.           size_t saltlen = 0;
                 ^
  785.           size_t i;
  786.   

apps/passwd.c:773:1: <Length trace>
771.   }
772.   
773. > static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
774.                        char *passwd, BIO *out, int quiet, int table,
775.                        int reverse, size_t pw_maxlen, passwd_modes mode)

apps/passwd.c:773:1: Parameter `**salt_p`
  771.   }
  772.   
  773. > static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
  774.                        char *passwd, BIO *out, int quiet, int table,
  775.                        int reverse, size_t pw_maxlen, passwd_modes mode)

apps/passwd.c:807:9: Array access: Offset: [0, 16] Size: [1, 17] by call to `do_passwd` 
  805.           for (i = 0; i < saltlen; i++)
  806.               (*salt_p)[i] = cov_2char[(*salt_p)[i] & 0x3f]; /* 6 bits */
  807.           (*salt_p)[i] = 0;
                 ^
  808.   # ifdef CHARSET_EBCDIC
  809.           /* The password encryption funtion will convert back to ASCII */
