crypto/srp/srp_vfy.c:379: error: BUFFER_OVERRUN_L3
  Offset: [55, +oo] Size: [1, +oo] by call to `TXT_DB_read`.
Showing all 6 steps of the trace


crypto/srp/srp_vfy.c:379:18: Call
377.       error_code = SRP_ERR_VBASE_INCOMPLETE_FILE;
378.   
379.       if ((tmpdb = TXT_DB_read(in, DB_NUMBER)) == NULL)
                        ^
380.           goto err;
381.   

crypto/txt_db/txt_db.c:69:1: <Length trace>
67.   #define BUFSIZE 512
68.   
69. > TXT_DB *TXT_DB_read(BIO *in, int num)
70.   {
71.       TXT_DB *ret = NULL;

crypto/txt_db/txt_db.c:69:1: Parameter `num`
  67.   #define BUFSIZE 512
  68.   
  69. > TXT_DB *TXT_DB_read(BIO *in, int num)
  70.   {
  71.       TXT_DB *ret = NULL;

crypto/txt_db/txt_db.c:102:5: Assignment
  100.       }
  101.   
  102.       add = (num + 1) * sizeof(char *);
             ^
  103.       buf->data[size - 1] = '\0';
  104.       offset = 0;

crypto/txt_db/txt_db.c:129:9: Assignment
  127.           }
  128.           pp = (char **)p;
  129.           p += add;
                 ^
  130.           n = 0;
  131.           pp[n++] = p;

crypto/txt_db/txt_db.c:152:13: Array access: Offset: [55, +oo] Size: [1, +oo] by call to `TXT_DB_read` 
  150.               }
  151.               esc = (*f == '\\');
  152.               *(p++) = *(f++);
                     ^
  153.           }
  154.           *(p++) = '\0';
