apps/pkcs8.c:185: error: BUFFER_OVERRUN_L2
  Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string`.
Showing all 11 steps of the trace


apps/pkcs8.c:68:1: Array declaration
66.   
67.   
68. > int MAIN(int argc, char **argv)
69.   {
70.   	char **args, *infile = NULL, *outfile = NULL;

apps/pkcs8.c:185:4: Call
183.   			}
184.   		} else {
185.   			EVP_read_pw_string(pass, 50, "Enter Encryption Password:", 1);
          ^
186.   			if (!(p8 = PKCS8_encrypt(pbe_nid, cipher,
187.   					pass, strlen(pass),

crypto/evp/evp_key.c:88:1: Parameter `len`
  86.   #endif
  87.   
  88. > int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
  89.   	{
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))

crypto/evp/evp_key.c:92:9: Call
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))
  91.   		prompt=prompt_string;
  92.   	return(des_read_pw_string(buf,len,prompt,verify));
                ^
  93.   	}
  94.   

crypto/des/read_pwd.c:199:1: Parameter `*buf`
    197.   static jmp_buf save;
    198.   
    199. > int des_read_pw_string(char *buf, int length, const char *prompt,
    200.   	     int verify)
    201.   	{

crypto/des/read_pwd.c:205:6: Call
    203.   	int ret;
    204.   
    205.   	ret=des_read_pw(buf,buff,(length>BUFSIZ)?BUFSIZ:length,prompt,verify);
                ^
    206.   	memset(buff,0,BUFSIZ);
    207.   	return(ret);

crypto/des/read_pwd.c:224:1: <Offset trace>
222.   
223.   /* return 0 if ok, 1 (or -1) otherwise */
224. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
225.   	     int verify)
226.   	{

crypto/des/read_pwd.c:224:1: Parameter `size`
      222.   
      223.   /* return 0 if ok, 1 (or -1) otherwise */
      224. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      225.   	     int verify)
      226.   	{

crypto/des/read_pwd.c:224:1: <Length trace>
222.   
223.   /* return 0 if ok, 1 (or -1) otherwise */
224. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
225.   	     int verify)
226.   	{

crypto/des/read_pwd.c:224:1: Parameter `*buf`
      222.   
      223.   /* return 0 if ok, 1 (or -1) otherwise */
      224. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      225.   	     int verify)
      226.   	{

crypto/des/read_pwd.c:322:3: Array access: Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string` 
      320.   
      321.   		buf[0]='\0';
      322.   		fgets(buf,size,tty);
               ^
      323.   		if (feof(tty)) goto error;
      324.   		if (ferror(tty)) goto error;
