crypto/pem/pem_seal.c:102: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `EVP_EncodeBlock`.
Showing all 8 steps of the trace


crypto/pem/pem_seal.c:73:2: Assignment
71.   	unsigned char key[EVP_MAX_KEY_LENGTH];
72.   	int ret= -1;
73.   	int i,j,max=0;
       ^
74.   	char *s=NULL;
75.   

crypto/pem/pem_seal.c:86:12: Array declaration
84.   		if (j > max) max=j;
85.   		}
86.   	s=(char *)Malloc(max*2);
                 ^
87.   	if (s == NULL)
88.   		{

crypto/pem/pem_seal.c:86:2: Assignment
84.   		if (j > max) max=j;
85.   		}
86.   	s=(char *)Malloc(max*2);
       ^
87.   	if (s == NULL)
88.   		{

crypto/pem/pem_seal.c:102:5: Call
100.   	for (i=0; i<npubk; i++)
101.   		{
102.   		j=EVP_EncodeBlock((unsigned char *)s,ek[i],
           ^
103.   			RSA_size(pubk[i]->pkey.rsa));
104.   		ekl[i]=j;

crypto/evp/encode.c:177:1: <Length trace>
175.   	}
176.   
177. > int EVP_EncodeBlock(unsigned char *t, unsigned char *f, int dlen)
178.   	{
179.   	int i,ret=0;

crypto/evp/encode.c:177:1: Parameter `*t`
  175.   	}
  176.   
  177. > int EVP_EncodeBlock(unsigned char *t, unsigned char *f, int dlen)
  178.   	{
  179.   	int i,ret=0;

crypto/evp/encode.c:188:6: Assignment
  186.   			l=	(((unsigned long)f[0])<<16L)|
  187.   				(((unsigned long)f[1])<< 8L)|f[2];
  188.   			*(t++)=conv_bin2ascii(l>>18L);
              ^
  189.   			*(t++)=conv_bin2ascii(l>>12L);
  190.   			*(t++)=conv_bin2ascii(l>> 6L);

crypto/evp/encode.c:189:4: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `EVP_EncodeBlock` 
  187.   				(((unsigned long)f[1])<< 8L)|f[2];
  188.   			*(t++)=conv_bin2ascii(l>>18L);
  189.   			*(t++)=conv_bin2ascii(l>>12L);
            ^
  190.   			*(t++)=conv_bin2ascii(l>> 6L);
  191.   			*(t++)=conv_bin2ascii(l     );
