ssl/ssl_lib.c:5061: error: BUFFER_OVERRUN_S2
  Offset: `s->clienthello->pre_proc_exts->received_order` Size: [0, +oo].
Showing all 8 steps of the trace


ssl/ssl_lib.c:5038:1: <Offset trace>
5036.   }
5037.   
5038. > int SSL_client_hello_get1_extensions_present(SSL *s, int **out, size_t *outlen)
5039.   {
5040.       RAW_EXTENSION *ext;

ssl/ssl_lib.c:5038:1: Parameter `s->clienthello->pre_proc_exts->received_order`
5036.   }
5037.   
5038. > int SSL_client_hello_get1_extensions_present(SSL *s, int **out, size_t *outlen)
5039.   {
5040.       RAW_EXTENSION *ext;

ssl/ssl_lib.c:5042:5: <Length trace>
5040.       RAW_EXTENSION *ext;
5041.       int *present;
5042.       size_t num = 0, i;
            ^
5043.   
5044.       if (s->clienthello == NULL || out == NULL || outlen == NULL)

ssl/ssl_lib.c:5042:5: Assignment
5040.       RAW_EXTENSION *ext;
5041.       int *present;
5042.       size_t num = 0, i;
            ^
5043.   
5044.       if (s->clienthello == NULL || out == NULL || outlen == NULL)

ssl/ssl_lib.c:5051:20: Call
5049.               num++;
5050.       }
5051.       if ((present = OPENSSL_malloc(sizeof(*present) * num)) == NULL) {
                           ^
5052.           SSLerr(SSL_F_SSL_CLIENT_HELLO_GET1_EXTENSIONS_PRESENT,
5053.                  ERR_R_MALLOC_FAILURE);

crypto/mem.c:201:9: Assignment
  199.   
  200.       if (num == 0)
  201.           return NULL;
                 ^
  202.   
  203.       FAILTEST();

ssl/ssl_lib.c:5051:10: Assignment
5049.               num++;
5050.       }
5051.       if ((present = OPENSSL_malloc(sizeof(*present) * num)) == NULL) {
                 ^
5052.           SSLerr(SSL_F_SSL_CLIENT_HELLO_GET1_EXTENSIONS_PRESENT,
5053.                  ERR_R_MALLOC_FAILURE);

ssl/ssl_lib.c:5061:13: Array access: Offset: s->clienthello->pre_proc_exts->received_order Size: [0, +oo]
5059.               if (ext->received_order >= num)
5060.                   goto err;
5061.               present[ext->received_order] = ext->type;
                    ^
5062.           }
5063.       }
