ssl/ssl_lib.c:2884: error: BUFFER_OVERRUN_L2
  Offset: [0, max(7, `s->s3->tmp.cert_idx`)] Size: 7.
Showing all 8 steps of the trace


ssl/ssl_lib.c:2867:1: <Offset trace>
2865.   }
2866.   
2867. > CERT_PKEY *ssl_get_server_send_pkey(SSL *s)
2868.   {
2869.       CERT *c;

ssl/ssl_lib.c:2867:1: Parameter `s->s3->tmp.cert_idx`
2865.   }
2866.   
2867. > CERT_PKEY *ssl_get_server_send_pkey(SSL *s)
2868.   {
2869.       CERT *c;

ssl/ssl_lib.c:2877:9: Call
2875.       ssl_set_masks(s);
2876.   
2877.       i = ssl_get_server_cert_index(s);
                ^
2878.   
2879.       /* This may or may not be an error. */

ssl/ssl_lib.c:2844:13: Assignment
  2842.           if (s->s3->tmp.sigalg == NULL) {
  2843.               SSLerr(SSL_F_SSL_GET_SERVER_CERT_INDEX, ERR_R_INTERNAL_ERROR);
  2844.               return -1;
                      ^
  2845.           }
  2846.           return s->s3->tmp.cert_idx;

ssl/ssl_lib.c:2877:5: Assignment
2875.       ssl_set_masks(s);
2876.   
2877.       i = ssl_get_server_cert_index(s);
            ^
2878.   
2879.       /* This may or may not be an error. */

ssl/ssl_lib.c:2867:1: <Length trace>
2865.   }
2866.   
2867. > CERT_PKEY *ssl_get_server_send_pkey(SSL *s)
2868.   {
2869.       CERT *c;

ssl/ssl_lib.c:2867:1: Parameter `s->cert->pkeys[*]`
2865.   }
2866.   
2867. > CERT_PKEY *ssl_get_server_send_pkey(SSL *s)
2868.   {
2869.       CERT *c;

ssl/ssl_lib.c:2884:5: Array access: Offset: [0, max(7, s->s3->tmp.cert_idx)] Size: 7
2882.   
2883.       /* May be NULL. */
2884.       return &c->pkeys[i];
            ^
2885.   }
2886.   
