ssl/ssl_cert.c:833: error: BUFFER_OVERRUN_S2
  Offset: [`*l` + 2, `*l` + 2] (⇐ `*l` + 2) Size: [1, 2147483644].
Showing all 4 steps of the trace


ssl/ssl_cert.c:822:1: <Length trace>
820.   /* Add a certificate to a BUF_MEM structure */
821.   
822. > static int ssl_add_cert_to_buf(BUF_MEM *buf, unsigned long *l, X509 *x)
823.   {
824.       int n;

ssl/ssl_cert.c:822:1: Parameter `*l`
820.   /* Add a certificate to a BUF_MEM structure */
821.   
822. > static int ssl_add_cert_to_buf(BUF_MEM *buf, unsigned long *l, X509 *x)
823.   {
824.       int n;

ssl/ssl_cert.c:832:5: Assignment
830.           return 0;
831.       }
832.       p = (unsigned char *)&(buf->data[*l]);
           ^
833.       l2n3(n, p);
834.       i2d_X509(x, &p);

ssl/ssl_cert.c:833:5: Array access: Offset: [*l + 2, *l + 2] (⇐ *l + 2) Size: [1, 2147483644]
831.       }
832.       p = (unsigned char *)&(buf->data[*l]);
833.       l2n3(n, p);
           ^
834.       i2d_X509(x, &p);
835.       *l += n + 3;
