apps/pkcs12.c:277: error: BUFFER_OVERRUN_L2
  Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string`.
Showing all 11 steps of the trace


apps/pkcs12.c:90:1: Array declaration
88.   int alg_print(BIO *x, X509_ALGOR *alg);
89.   int cert_load(BIO *in, STACK_OF(X509) *sk);
90. > int MAIN(int argc, char **argv)
91.   {
92.       char *infile=NULL, *outfile=NULL, *keyname = NULL;	

apps/pkcs12.c:277:5: Call
275.       }
276.       if (twopass) {
277.   	if(EVP_read_pw_string (macpass, 50, "Enter MAC Password:", export_cert))
           ^
278.   	{
279.       	    BIO_printf (bio_err, "Can't read Password\n");

crypto/evp/evp_key.c:88:1: Parameter `len`
  86.   #endif
  87.   
  88. > int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
  89.   	{
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))

crypto/evp/evp_key.c:92:9: Call
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))
  91.   		prompt=prompt_string;
  92.   	return(des_read_pw_string(buf,len,prompt,verify));
                ^
  93.   	}
  94.   

crypto/des/read_pwd.c:195:1: Parameter `*buf`
    193.   static jmp_buf save;
    194.   
    195. > int des_read_pw_string(char *buf, int length, const char *prompt,
    196.   	     int verify)
    197.   	{

crypto/des/read_pwd.c:201:6: Call
    199.   	int ret;
    200.   
    201.   	ret=des_read_pw(buf,buff,(length>BUFSIZ)?BUFSIZ:length,prompt,verify);
                ^
    202.   	memset(buff,0,BUFSIZ);
    203.   	return(ret);

crypto/des/read_pwd.c:220:1: <Offset trace>
218.   
219.   /* return 0 if ok, 1 (or -1) otherwise */
220. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
221.   	     int verify)
222.   	{

crypto/des/read_pwd.c:220:1: Parameter `size`
      218.   
      219.   /* return 0 if ok, 1 (or -1) otherwise */
      220. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      221.   	     int verify)
      222.   	{

crypto/des/read_pwd.c:220:1: <Length trace>
218.   
219.   /* return 0 if ok, 1 (or -1) otherwise */
220. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
221.   	     int verify)
222.   	{

crypto/des/read_pwd.c:220:1: Parameter `*buf`
      218.   
      219.   /* return 0 if ok, 1 (or -1) otherwise */
      220. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      221.   	     int verify)
      222.   	{

crypto/des/read_pwd.c:318:3: Array access: Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string` 
      316.   
      317.   		buf[0]='\0';
      318.   		fgets(buf,size,tty);
               ^
      319.   		if (feof(tty)) goto error;
      320.   		if (ferror(tty)) goto error;
