ssl/statem/statem_srvr.c:2979: error: BUFFER_OVERRUN_S2
  Offset added: [`s->method->ssl3_enc->hhlen` + 22, `s->method->ssl3_enc->hhlen` + 22] (⇐ [`s->method->ssl3_enc->hhlen` + 6, `s->method->ssl3_enc->hhlen` + 6] + 16) Size: [1, 2147483644].
Showing all 9 steps of the trace


ssl/statem/statem_srvr.c:2869:1: <Length trace>
2867.   }
2868.   
2869. > int tls_construct_new_session_ticket(SSL *s)
2870.   {
2871.       unsigned char *senc = NULL;

ssl/statem/statem_srvr.c:2869:1: Parameter `s->method->ssl3_enc->hhlen`
2867.   }
2868.   
2869. > int tls_construct_new_session_ticket(SSL *s)
2870.   {
2871.       unsigned char *senc = NULL;

ssl/statem/statem_srvr.c:2942:5: Assignment
2940.           goto err;
2941.   
2942.       p = ssl_handshake_start(s);
            ^
2943.       /*
2944.        * Initialize HMAC and cipher contexts. If callback present it does

ssl/statem/statem_srvr.c:2973:5: Assignment
2971.        * new sessions will live as long as their sessions.
2972.        */
2973.       l2n(s->hit ? 0 : s->session->timeout, p);
            ^
2974.   
2975.       /* Skip ticket length for now */

ssl/statem/statem_srvr.c:2973:5: Assignment
2971.        * new sessions will live as long as their sessions.
2972.        */
2973.       l2n(s->hit ? 0 : s->session->timeout, p);
            ^
2974.   
2975.       /* Skip ticket length for now */

ssl/statem/statem_srvr.c:2973:5: Assignment
2971.        * new sessions will live as long as their sessions.
2972.        */
2973.       l2n(s->hit ? 0 : s->session->timeout, p);
            ^
2974.   
2975.       /* Skip ticket length for now */

ssl/statem/statem_srvr.c:2973:5: Assignment
2971.        * new sessions will live as long as their sessions.
2972.        */
2973.       l2n(s->hit ? 0 : s->session->timeout, p);
            ^
2974.   
2975.       /* Skip ticket length for now */

ssl/statem/statem_srvr.c:2976:5: Assignment
2974.   
2975.       /* Skip ticket length for now */
2976.       p += 2;
            ^
2977.       /* Output key name */
2978.       macstart = p;

ssl/statem/statem_srvr.c:2979:5: Array access: Offset added: [s->method->ssl3_enc->hhlen + 22, s->method->ssl3_enc->hhlen + 22] (⇐ [s->method->ssl3_enc->hhlen + 6, s->method->ssl3_enc->hhlen + 6] + 16) Size: [1, 2147483644]
2977.       /* Output key name */
2978.       macstart = p;
2979.       memcpy(p, key_name, sizeof(key_name));
            ^
2980.       p += sizeof(key_name);
2981.       /* output IV */
