apps/pkcs8.c:172: error: BUFFER_OVERRUN_L2
  Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string`.
Showing all 11 steps of the trace


apps/pkcs8.c:68:1: Array declaration
66.   
67.   
68. > int MAIN(int argc, char **argv)
69.   {
70.   	char **args, *infile = NULL, *outfile = NULL;

apps/pkcs8.c:172:4: Call
170.   			}
171.   		} else {
172.   			EVP_read_pw_string(pass, 50, "Enter Encryption Password:", 1);
          ^
173.   			if (!(p8 = PKCS8_encrypt(pbe_nid, pass, strlen(pass),
174.   					 NULL, 0, iter, p8inf))) {

crypto/evp/evp_key.c:88:1: Parameter `len`
  86.   #endif
  87.   
  88. > int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
  89.   	{
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))

crypto/evp/evp_key.c:92:9: Call
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))
  91.   		prompt=prompt_string;
  92.   	return(des_read_pw_string(buf,len,prompt,verify));
                ^
  93.   	}
  94.   

crypto/des/read_pwd.c:198:1: Parameter `*buf`
    196.   static jmp_buf save;
    197.   
    198. > int des_read_pw_string(char *buf, int length, const char *prompt,
    199.   	     int verify)
    200.   	{

crypto/des/read_pwd.c:204:6: Call
    202.   	int ret;
    203.   
    204.   	ret=des_read_pw(buf,buff,(length>BUFSIZ)?BUFSIZ:length,prompt,verify);
                ^
    205.   	memset(buff,0,BUFSIZ);
    206.   	return(ret);

crypto/des/read_pwd.c:223:1: <Offset trace>
221.   
222.   /* return 0 if ok, 1 (or -1) otherwise */
223. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
224.   	     int verify)
225.   	{

crypto/des/read_pwd.c:223:1: Parameter `size`
      221.   
      222.   /* return 0 if ok, 1 (or -1) otherwise */
      223. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      224.   	     int verify)
      225.   	{

crypto/des/read_pwd.c:223:1: <Length trace>
221.   
222.   /* return 0 if ok, 1 (or -1) otherwise */
223. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
224.   	     int verify)
225.   	{

crypto/des/read_pwd.c:223:1: Parameter `*buf`
      221.   
      222.   /* return 0 if ok, 1 (or -1) otherwise */
      223. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      224.   	     int verify)
      225.   	{

crypto/des/read_pwd.c:321:3: Array access: Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string` 
      319.   
      320.   		buf[0]='\0';
      321.   		fgets(buf,size,tty);
               ^
      322.   		if (feof(tty)) goto error;
      323.   		if (ferror(tty)) goto error;
