crypto/evp/e_aes.c:1688: error: BUFFER_OVERRUN_L3
  Offset added: 16 Size: [0, +oo] by call to `CRYPTO_gcm128_tag`.
Showing all 7 steps of the trace


crypto/evp/e_aes.c:1688:9: Call
1686.               return 0;
1687.           }
1688.           CRYPTO_gcm128_tag(&gctx->gcm, ctx->buf, 16);
                ^
1689.           gctx->taglen = 16;
1690.           /* Don't reuse the IV */

crypto/modes/gcm128.c:1697:12: <Offset trace>
1695.       CRYPTO_gcm128_finish(ctx, NULL, 0);
1696.       memcpy(tag, ctx->Xi.c,
1697.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
                   ^
1698.   }
1699.   

crypto/modes/gcm128.c:1697:12: Assignment
  1695.       CRYPTO_gcm128_finish(ctx, NULL, 0);
  1696.       memcpy(tag, ctx->Xi.c,
  1697.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
                     ^
  1698.   }
  1699.   

crypto/modes/gcm128.c:1695:5: <Length trace>
1693.   void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
1694.   {
1695.       CRYPTO_gcm128_finish(ctx, NULL, 0);
            ^
1696.       memcpy(tag, ctx->Xi.c,
1697.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));

crypto/modes/gcm128.c:1695:5: Call
  1693.   void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
  1694.   {
  1695.       CRYPTO_gcm128_finish(ctx, NULL, 0);
              ^
  1696.       memcpy(tag, ctx->Xi.c,
  1697.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));

crypto/modes/gcm128.c:1649:1: Parameter `ctx->Xi.c[*]`
    1647.   }
    1648.   
    1649. > int CRYPTO_gcm128_finish(GCM128_CONTEXT *ctx, const unsigned char *tag,
    1650.                            size_t len)
    1651.   {

crypto/modes/gcm128.c:1696:5: Array access: Offset added: 16 Size: [0, +oo] by call to `CRYPTO_gcm128_tag` 
  1694.   {
  1695.       CRYPTO_gcm128_finish(ctx, NULL, 0);
  1696.       memcpy(tag, ctx->Xi.c,
              ^
  1697.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
  1698.   }
