crypto/x509/x_x509.c:110: error: BUFFER_OVERRUN_L3
  Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


crypto/x509/x_x509.c:110:21: Call
108.       case ASN1_OP_D2I_POST:
109.           OPENSSL_free(ret->name);
110.           ret->name = X509_NAME_oneline(ret->cert_info.subject, NULL, 0);
                           ^
111.           break;
112.   

crypto/x509/x509_obj.c:67:1: <Offset trace>
65.   #include "internal/x509_int.h"
66.   
67. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
68.   {
69.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:67:1: Parameter `len`
  65.   #include "internal/x509_int.h"
  66.   
  67. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  68.   {
  69.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:67:1: <Length trace>
65.   #include "internal/x509_int.h"
66.   
67. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
68.   {
69.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:67:1: Parameter `*buf`
  65.   #include "internal/x509_int.h"
  66.   
  67. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  68.   {
  69.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:97:9: Array access: Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline` 
  95.           }
  96.           strncpy(buf, "NO X509_NAME", len);
  97.           buf[len - 1] = '\0';
                 ^
  98.           return buf;
  99.       }
