crypto/pem/pem_info.c:237: error: BUFFER_OVERRUN_L3
  Offset: 12 Size: [1, 2147483644] by call to `PEM_get_EVP_CIPHER_INFO`.
Showing all 8 steps of the trace


crypto/pem/pem_info.c:117:13: Call
115.           raw = 0;
116.           ptype = 0;
117.           i = PEM_read_bio(bp, &name, &header, &data, &len);
                   ^
118.           if (i == 0) {
119.               error = ERR_GET_REASON(ERR_peek_last_error());

crypto/pem/pem_lib.c:675:1: Parameter `**header`
  673.   #endif
  674.   
  675. > int PEM_read_bio(BIO *bp, char **name, char **header, unsigned char **data,
  676.                    long *len)
  677.   {

crypto/pem/pem_info.c:237:22: Call
235.                   EVP_CIPHER_INFO cipher;
236.   
237.                   if (!PEM_get_EVP_CIPHER_INFO(header, &cipher))
                            ^
238.                       goto err;
239.                   if (!PEM_do_header(&cipher, data, &len, cb, u))

crypto/pem/pem_lib.c:488:1: <Length trace>
486.   }
487.   
488. > int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher)
489.   {
490.       const EVP_CIPHER *enc = NULL;

crypto/pem/pem_lib.c:488:1: Parameter `*header`
  486.   }
  487.   
  488. > int PEM_get_EVP_CIPHER_INFO(char *header, EVP_CIPHER_INFO *cipher)
  489.   {
  490.       const EVP_CIPHER *enc = NULL;

crypto/pem/pem_lib.c:501:5: Assignment
  499.           return (0);
  500.       }
  501.       header += 11;
             ^
  502.       if (*header != '4')
  503.           return (0);

crypto/pem/pem_lib.c:504:5: Assignment
  502.       if (*header != '4')
  503.           return (0);
  504.       header++;
             ^
  505.       if (*header != ',')
  506.           return (0);

crypto/pem/pem_lib.c:505:9: Array access: Offset: 12 Size: [1, 2147483644] by call to `PEM_get_EVP_CIPHER_INFO` 
  503.           return (0);
  504.       header++;
  505.       if (*header != ',')
                 ^
  506.           return (0);
  507.       header++;
