ssl/ssl_lib.c:2296: error: BUFFER_OVERRUN_L2
  Offset: [0, 10] Size: 10.
Showing all 8 steps of the trace


ssl/ssl_lib.c:2289:9: <Offset trace>
2287.   
2288.       c = s->cert;
2289.       i = ssl_get_server_cert_index(s);
                ^
2290.   
2291.       if (i == -1)

ssl/ssl_lib.c:2289:9: Call
2287.   
2288.       c = s->cert;
2289.       i = ssl_get_server_cert_index(s);
                ^
2290.   
2291.       if (i == -1)

ssl/ssl_lib.c:2196:9: Assignment
  2194.       idx = ssl_cipher_get_cert_index(s->s3->tmp.new_cipher);
  2195.       if (idx == SSL_PKEY_RSA_ENC && !s->cert->pkeys[SSL_PKEY_RSA_ENC].x509)
  2196.           idx = SSL_PKEY_RSA_SIGN;
                  ^
  2197.       if (idx == SSL_PKEY_GOST_EC) {
  2198.           if (s->cert->pkeys[SSL_PKEY_GOST12_512].x509)

ssl/ssl_lib.c:2209:5: Assignment
  2207.       if (idx == -1)
  2208.           SSLerr(SSL_F_SSL_GET_SERVER_CERT_INDEX, ERR_R_INTERNAL_ERROR);
  2209.       return idx;
              ^
  2210.   }
  2211.   

ssl/ssl_lib.c:2289:5: Assignment
2287.   
2288.       c = s->cert;
2289.       i = ssl_get_server_cert_index(s);
            ^
2290.   
2291.       if (i == -1)

ssl/ssl_lib.c:2281:1: <Length trace>
2279.   }
2280.   
2281. > int ssl_get_server_cert_serverinfo(SSL *s, const unsigned char **serverinfo,
2282.                                      size_t *serverinfo_length)
2283.   {

ssl/ssl_lib.c:2281:1: Parameter `s->cert->pkeys[*]`
2279.   }
2280.   
2281. > int ssl_get_server_cert_serverinfo(SSL *s, const unsigned char **serverinfo,
2282.                                      size_t *serverinfo_length)
2283.   {

ssl/ssl_lib.c:2296:19: Array access: Offset: [0, 10] Size: 10
2294.           return 0;
2295.   
2296.       *serverinfo = c->pkeys[i].serverinfo;
                          ^
2297.       *serverinfo_length = c->pkeys[i].serverinfo_length;
2298.       return 1;
