crypto/camellia/cmll_cfb.c:198: error: BUFFER_OVERRUN_L2
  Offset: [1, 32] Size: 32.
Showing all 5 steps of the trace


crypto/camellia/cmll_cfb.c:197:7: <Offset trace>
195.   		memcpy(ivec,ovec+num,CAMELLIA_BLOCK_SIZE);
196.   	else
197.   		for(n=0 ; n < CAMELLIA_BLOCK_SIZE ; ++n)
             ^
198.   			ivec[n] = ovec[n+num]<<rem | ovec[n+num+1]>>(8-rem);
199.   

crypto/camellia/cmll_cfb.c:197:7: Assignment
195.   		memcpy(ivec,ovec+num,CAMELLIA_BLOCK_SIZE);
196.   	else
197.   		for(n=0 ; n < CAMELLIA_BLOCK_SIZE ; ++n)
             ^
198.   			ivec[n] = ovec[n+num]<<rem | ovec[n+num+1]>>(8-rem);
199.   

crypto/camellia/cmll_cfb.c:171:1: <Length trace>
169.   /* This expects a single block of size nbits for both in and out. Note that
170.      it corrupts any extra bits in the last byte of out */
171. > void Camellia_cfbr_encrypt_block(const unsigned char *in,unsigned char *out,
172.   	const int nbits,const CAMELLIA_KEY *key,
173.   	unsigned char *ivec,const int enc)

crypto/camellia/cmll_cfb.c:171:1: Array declaration
169.   /* This expects a single block of size nbits for both in and out. Note that
170.      it corrupts any extra bits in the last byte of out */
171. > void Camellia_cfbr_encrypt_block(const unsigned char *in,unsigned char *out,
172.   	const int nbits,const CAMELLIA_KEY *key,
173.   	unsigned char *ivec,const int enc)

crypto/camellia/cmll_cfb.c:198:33: Array access: Offset: [1, 32] Size: 32
196.   	else
197.   		for(n=0 ; n < CAMELLIA_BLOCK_SIZE ; ++n)
198.   			ivec[n] = ovec[n+num]<<rem | ovec[n+num+1]>>(8-rem);
                                       ^
199.   
200.   	/* it is not necessary to cleanse ovec, since the IV is not secret */
