crypto/rsa/rsa_eay.c:311: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `RSA_padding_check_PKCS1_type_2`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:265:6: Call
263.   	if (ctx == NULL) goto err;
264.   
265.   	num=BN_num_bytes(rsa->n);
            ^
266.   
267.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)

crypto/bn/bn_lib.c:245:19: Assignment
  243.   	bn_check_top(a);
  244.   
  245.   	if (a->top == 0) return(0);
                           ^
  246.   	l=a->d[a->top-1];
  247.   	i=(a->top-1)*BN_BITS2;

crypto/rsa/rsa_eay.c:265:2: Assignment
263.   	if (ctx == NULL) goto err;
264.   
265.   	num=BN_num_bytes(rsa->n);
        ^
266.   
267.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)

crypto/rsa/rsa_eay.c:267:28: Array declaration
265.   	num=BN_num_bytes(rsa->n);
266.   
267.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
                                  ^
268.   		{
269.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:267:7: Assignment
265.   	num=BN_num_bytes(rsa->n);
266.   
267.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
             ^
268.   		{
269.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:311:5: Call
309.   		{
310.   	case RSA_PKCS1_PADDING:
311.   		r=RSA_padding_check_PKCS1_type_2(to,num,buf,j,num);
           ^
312.   		break;
313.           case RSA_PKCS1_OAEP_PADDING:

crypto/rsa/rsa_pk1.c:186:1: <Length trace>
184.   	}
185.   
186. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
187.   	     unsigned char *from, int flen, int num)
188.   	{

crypto/rsa/rsa_pk1.c:186:1: Parameter `*from`
  184.   	}
  185.   
  186. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
  187.   	     unsigned char *from, int flen, int num)
  188.   	{

crypto/rsa/rsa_pk1.c:192:2: Assignment
  190.   	unsigned char *p;
  191.   
  192.   	p=from;
          ^
  193.   	if ((num != (flen+1)) || (*(p++) != 02))
  194.   		{

crypto/rsa/rsa_pk1.c:193:30: Assignment
  191.   
  192.   	p=from;
  193.   	if ((num != (flen+1)) || (*(p++) != 02))
                                      ^
  194.   		{
  195.   		RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2,RSA_R_BLOCK_TYPE_IS_NOT_02);

crypto/rsa/rsa_pk1.c:205:7: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `RSA_padding_check_PKCS1_type_2` 
  203.   	j=flen-1; /* one for type. */
  204.   	for (i=0; i<j; i++)
  205.   		if (*(p++) == 0) break;
               ^
  206.   
  207.   	if (i == j)
