apps/enc.c:375: error: BUFFER_OVERRUN_L2
  Offset added: [512, 8192] Size: 4096 by call to `EVP_read_pw_string`.
Showing all 12 steps of the trace


apps/enc.c:331:9: Array declaration
329.   		}
330.   
331.   	strbuf=Malloc(SIZE);
               ^
332.   	buff=(unsigned char *)Malloc(EVP_ENCODE_LENGTH(bsize));
333.   	if ((buff == NULL) || (strbuf == NULL))

apps/enc.c:331:2: Assignment
329.   		}
330.   
331.   	strbuf=Malloc(SIZE);
        ^
332.   	buff=(unsigned char *)Malloc(EVP_ENCODE_LENGTH(bsize));
333.   	if ((buff == NULL) || (strbuf == NULL))

apps/enc.c:375:6: Call
373.   				(enc)?"encryption":"decryption");
374.   			strbuf[0]='\0';
375.   			i=EVP_read_pw_string((char *)strbuf,SIZE,buf,enc);
            ^
376.   			if (i == 0)
377.   				{

crypto/evp/evp_key.c:88:1: Parameter `len`
  86.   #endif
  87.   
  88. > int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
  89.   	{
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))

crypto/evp/evp_key.c:92:9: Call
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))
  91.   		prompt=prompt_string;
  92.   	return(des_read_pw_string(buf,len,prompt,verify));
                ^
  93.   	}
  94.   

crypto/des/read_pwd.c:201:1: Parameter `*buf`
    199.   static jmp_buf save;
    200.   
    201. > int des_read_pw_string(char *buf, int length, const char *prompt,
    202.   	     int verify)
    203.   	{

crypto/des/read_pwd.c:207:6: Call
    205.   	int ret;
    206.   
    207.   	ret=des_read_pw(buf,buff,(length>BUFSIZ)?BUFSIZ:length,prompt,verify);
                ^
    208.   	memset(buff,0,BUFSIZ);
    209.   	return(ret);

crypto/des/read_pwd.c:226:1: <Offset trace>
224.   
225.   /* return 0 if ok, 1 (or -1) otherwise */
226. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
227.   	     int verify)
228.   	{

crypto/des/read_pwd.c:226:1: Parameter `size`
      224.   
      225.   /* return 0 if ok, 1 (or -1) otherwise */
      226. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      227.   	     int verify)
      228.   	{

crypto/des/read_pwd.c:226:1: <Length trace>
224.   
225.   /* return 0 if ok, 1 (or -1) otherwise */
226. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
227.   	     int verify)
228.   	{

crypto/des/read_pwd.c:226:1: Parameter `*buf`
      224.   
      225.   /* return 0 if ok, 1 (or -1) otherwise */
      226. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      227.   	     int verify)
      228.   	{

crypto/des/read_pwd.c:324:3: Array access: Offset added: [512, 8192] Size: 4096 by call to `EVP_read_pw_string` 
      322.   
      323.   		buf[0]='\0';
      324.   		fgets(buf,size,tty);
               ^
      325.   		if (feof(tty)) goto error;
      326.   		if (ferror(tty)) goto error;
