apps/ca.c:2109: error: BUFFER_OVERRUN_L3
  Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


apps/ca.c:2109:20: Call
2107.       for (i = 0; i < DB_NUMBER; i++)
2108.           row[i] = NULL;
2109.       row[DB_name] = X509_NAME_oneline(X509_get_subject_name(x509), NULL, 0);
                           ^
2110.       bn = ASN1_INTEGER_to_BN(X509_get_serialNumber(x509), NULL);
2111.       if (!bn)

crypto/x509/x509_obj.c:66:1: <Offset trace>
64.   #include "internal/x509_int.h"
65.   
66. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
67.   {
68.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:66:1: Parameter `len`
  64.   #include "internal/x509_int.h"
  65.   
  66. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  67.   {
  68.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:66:1: <Length trace>
64.   #include "internal/x509_int.h"
65.   
66. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
67.   {
68.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:66:1: Parameter `*buf`
  64.   #include "internal/x509_int.h"
  65.   
  66. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  67.   {
  68.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:96:9: Array access: Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline` 
  94.           }
  95.           strncpy(buf, "NO X509_NAME", len);
  96.           buf[len - 1] = '\0';
                ^
  97.           return buf;
  98.       }
