crypto/x509/x509_vfy.c:353: error: BUFFER_OVERRUN_L3
  Offset: [15, 17] (⇐ [10, 12] + 5) Size: [0, +oo] by call to `X509_cmp_current_time`.
Showing all 11 steps of the trace


crypto/x509/x509_vfy.c:335:14: Call
333.   		if (!xs->valid)
334.   			{
335.   			if ((pkey=X509_get_pubkey(xi)) == NULL)
                    ^
336.   				{
337.   				ctx->error=X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY;

crypto/x509/x509_cmp.c:241:9: Call
  239.   	if ((x == NULL) || (x->cert_info == NULL))
  240.   		return(NULL);
  241.   	return(X509_PUBKEY_get(x->cert_info->key));
                 ^
  242.   	}
  243.   

crypto/asn1/x_pubkey.c:244:9: Call
    242.   			p=a->parameter->value.sequence->data;
    243.   			j=a->parameter->value.sequence->length;
    244.   			if (!d2i_DSAparams(&ret->pkey.dsa,&p,(long)j))
                   ^
    245.   				goto err;
    246.   			}

crypto/asn1/d2i_dsap.c:79:2: Call
      77.   	M_ASN1_D2I_Init();
      78.   	M_ASN1_D2I_start_sequence();
      79.   	M_ASN1_D2I_get(bs,d2i_ASN1_INTEGER);
             ^
      80.   	if ((ret->p=BN_bin2bn(bs->data,bs->length,ret->p)) == NULL) goto err_bn;
      81.   	M_ASN1_D2I_get(bs,d2i_ASN1_INTEGER);

crypto/asn1/a_int.c:117:1: Parameter `*(*a)->data`
        115.   	}
        116.   
        117. > ASN1_INTEGER *d2i_ASN1_INTEGER(ASN1_INTEGER **a, unsigned char **pp,
        118.   	     long length)
        119.   	{

crypto/x509/x509_vfy.c:353:6: Call
351.   			pkey=NULL;
352.   
353.   			i=X509_cmp_current_time(X509_get_notBefore(xs));
            ^
354.   			if (i == 0)
355.   				{

crypto/x509/x509_vfy.c:407:1: <Length trace>
405.   	}
406.   
407. > int X509_cmp_current_time(ASN1_UTCTIME *ctm)
408.   	{
409.   	char *str;

crypto/x509/x509_vfy.c:407:1: Parameter `*ctm->data`
  405.   	}
  406.   
  407. > int X509_cmp_current_time(ASN1_UTCTIME *ctm)
  408.   	{
  409.   	char *str;

crypto/x509/x509_vfy.c:417:2: Assignment
  415.   	p=buff1;
  416.   	i=ctm->length;
  417.   	str=(char *)ctm->data;
          ^
  418.   	if ((i < 11) || (i > 17)) return(0);
  419.   	memcpy(p,str,10);

crypto/x509/x509_vfy.c:421:2: Assignment
  419.   	memcpy(p,str,10);
  420.   	p+=10;
  421.   	str+=10;
          ^
  422.   
  423.   	if ((*str == 'Z') || (*str == '-') || (*str == '+'))

crypto/x509/x509_vfy.c:433:25: Array access: Offset: [15, 17] (⇐ [10, 12] + 5) Size: [0, +oo] by call to `X509_cmp_current_time` 
  431.   	else
  432.   		{
  433.   		if ((*str != '+') && (str[5] != '-'))
                                 ^
  434.   			return(0);
  435.   		offset=((str[1]-'0')*10+(str[2]-'0'))*60;
