ssl/d1_lib.c:755: error: BUFFER_OVERRUN_L3
  Offset: 13 Size: [1, 2147483644].
Showing all 5 steps of the trace


ssl/d1_lib.c:536:14: <Length trace>
534.           }
535.   
536.           if (!BUF_MEM_grow(bufm, SSL3_RT_MAX_PLAIN_LENGTH)) {
                    ^
537.               BUF_MEM_free(bufm);
538.               SSLerr(SSL_F_DTLSV1_LISTEN, ERR_R_MALLOC_FAILURE);

ssl/d1_lib.c:536:14: Call
534.           }
535.   
536.           if (!BUF_MEM_grow(bufm, SSL3_RT_MAX_PLAIN_LENGTH)) {
                    ^
537.               BUF_MEM_free(bufm);
538.               SSLerr(SSL_F_DTLSV1_LISTEN, ERR_R_MALLOC_FAILURE);

crypto/buffer/buffer.c:121:1: Parameter `*str->data`
  119.   }
  120.   
  121. > size_t BUF_MEM_grow(BUF_MEM *str, size_t len)
  122.   {
  123.       char *ret;

ssl/d1_lib.c:543:5: Assignment
541.           s->init_buf = bufm;
542.       }
543.       buf = (unsigned char *)s->init_buf->data;
           ^
544.   
545.       do {

ssl/d1_lib.c:755:13: Array access: Offset: 13 Size: [1, 2147483644]
753.               }
754.   
755.               p = &buf[DTLS1_RT_HEADER_LENGTH];
                   ^
756.               msglen = dtls_raw_hello_verify_request(p + DTLS1_HM_HEADER_LENGTH,
757.                                                      cookie, cookielen);
