ssl/s3_cbc.c:617: error: BUFFER_OVERRUN_L2
  Offset added: [-`mac_secret_length` - 46, `mac_secret_length` + 238] (⇐ [-115, `mac_secret_length` - 5] + [-`mac_secret_length` + 69, 243]) Size: 128.
Showing all 5 steps of the trace


ssl/s3_cbc.c:418:2: <Offset trace>
416.   	void (*md_final_raw)(void *ctx, unsigned char *md_out);
417.   	void (*md_transform)(void *ctx, const unsigned char *block);
418.   	unsigned md_size, md_block_size = 64;
        ^
419.   	unsigned sslv3_pad_length = 40, header_length, variance_blocks,
420.   		 len, max_mac_bytes, num_blocks,

ssl/s3_cbc.c:418:2: Assignment
416.   	void (*md_final_raw)(void *ctx, unsigned char *md_out);
417.   	void (*md_transform)(void *ctx, const unsigned char *block);
418.   	unsigned md_size, md_block_size = 64;
        ^
419.   	unsigned sslv3_pad_length = 40, header_length, variance_blocks,
420.   		 len, max_mac_bytes, num_blocks,

ssl/s3_cbc.c:402:1: <Length trace>
400.    * padding too. ) 
401.    */
402. > void ssl3_cbc_digest_record(
403.   	const EVP_MD_CTX *ctx,
404.   	unsigned char* md_out,

ssl/s3_cbc.c:402:1: Array declaration
400.    * padding too. ) 
401.    */
402. > void ssl3_cbc_digest_record(
403.   	const EVP_MD_CTX *ctx,
404.   	unsigned char* md_out,

ssl/s3_cbc.c:617:4: Array access: Offset added: [-mac_secret_length - 46, mac_secret_length + 238] (⇐ [-115, mac_secret_length - 5] + [-mac_secret_length + 69, 243]) Size: 128
615.   			md_transform(md_state.c, header);
616.   			memcpy(first_block, header + md_block_size, overhang);
617.   			memcpy(first_block + overhang, data, md_block_size-overhang);
          ^
618.   			md_transform(md_state.c, first_block);
619.   			for (i = 1; i < k/md_block_size - 1; i++)
