test/drbgtest.c:457: error: BUFFER_OVERRUN_L3
  Offset added: [0, 15] Size: [0, +oo] by call to `single_kat`.
Showing all 10 steps of the trace


test/drbgtest.c:457:10: Call
455.       int rv = 0;
456.   
457.       if (!single_kat(td))
                ^
458.           goto err;
459.       rv = 1;

test/drbgtest.c:148:1: Parameter `td->exlen`
  146.    * Do a single KAT test.  Return 0 on failure.
  147.    */
  148. > static int single_kat(DRBG_SELFTEST_DATA *td)
  149.   {
  150.       RAND_DRBG *drbg = NULL;

test/drbgtest.c:174:17: Call
  172.   
  173.       if (!TEST_true(RAND_DRBG_instantiate(drbg, td->pers, td->perslen))
  174.               || !TEST_true(RAND_DRBG_generate(drbg, buff, td->exlen, 0,
                         ^
  175.                                                td->adin, td->adinlen))
  176.               || !TEST_mem_eq(td->expected, td->exlen, buff, td->exlen))

crypto/rand/drbg_lib.c:248:1: Parameter `outlen`
    246.    * sent in |adin| and |adinlen|.
    247.    */
    248. > int RAND_DRBG_generate(RAND_DRBG *drbg, unsigned char *out, size_t outlen,
    249.                          int prediction_resistance,
    250.                          const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_lib.c:281:10: Call
    279.       }
    280.   
    281.       if (!ctr_generate(drbg, out, outlen, adin, adinlen)) {
                    ^
    282.           drbg->state = DRBG_ERROR;
    283.           RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_GENERATE_ERROR);

crypto/rand/drbg_rand.c:261:1: <Offset trace>
259.   }
260.   
261. > int ctr_generate(RAND_DRBG *drbg,
262.                    unsigned char *out, size_t outlen,
263.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:261:1: Parameter `outlen`
      259.   }
      260.   
      261. > int ctr_generate(RAND_DRBG *drbg,
      262.                    unsigned char *out, size_t outlen,
      263.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:261:1: <Length trace>
259.   }
260.   
261. > int ctr_generate(RAND_DRBG *drbg,
262.                    unsigned char *out, size_t outlen,
263.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:261:1: Parameter `drbg->ctr.K[*]`
      259.   }
      260.   
      261. > int ctr_generate(RAND_DRBG *drbg,
      262.                    unsigned char *out, size_t outlen,
      263.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:283:13: Array access: Offset added: [0, 15] Size: [0, +oo] by call to `single_kat` 
      281.               /* Use K as temp space as it will be updated */
      282.               AES_encrypt(ctr->V, ctr->K, &ctr->ks);
      283.               memcpy(out, ctr->K, outlen);
                         ^
      284.               break;
      285.           }
