crypto/rsa/rsa_eay.c:310: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `RSA_padding_check_SSLv23`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:256:6: Call
254.   	if (ctx == NULL) goto err;
255.   
256.   	num=BN_num_bytes(rsa->n);
            ^
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)

crypto/bn/bn_lib.c:245:19: Assignment
  243.   	bn_check_top(a);
  244.   
  245.   	if (a->top == 0) return(0);
                           ^
  246.   	l=a->d[a->top-1];
  247.   	i=(a->top-1)*BN_BITS2;

crypto/rsa/rsa_eay.c:256:2: Assignment
254.   	if (ctx == NULL) goto err;
255.   
256.   	num=BN_num_bytes(rsa->n);
        ^
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)

crypto/rsa/rsa_eay.c:258:28: Array declaration
256.   	num=BN_num_bytes(rsa->n);
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
                                  ^
259.   		{
260.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:258:7: Assignment
256.   	num=BN_num_bytes(rsa->n);
257.   
258.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
             ^
259.   		{
260.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_DECRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:310:5: Call
308.   #endif
309.    	case RSA_SSLV23_PADDING:
310.   		r=RSA_padding_check_SSLv23(to,num,buf,j,num);
           ^
311.   		break;
312.   	case RSA_NO_PADDING:

crypto/rsa/rsa_ssl.c:103:1: <Length trace>
101.   	}
102.   
103. > int RSA_padding_check_SSLv23(unsigned char *to, int tlen, unsigned char *from,
104.   	     int flen, int num)
105.   	{

crypto/rsa/rsa_ssl.c:103:1: Parameter `*from`
  101.   	}
  102.   
  103. > int RSA_padding_check_SSLv23(unsigned char *to, int tlen, unsigned char *from,
  104.   	     int flen, int num)
  105.   	{

crypto/rsa/rsa_ssl.c:109:2: Assignment
  107.   	unsigned char *p;
  108.   
  109.   	p=from;
          ^
  110.   	if (flen < 10)
  111.   		{

crypto/rsa/rsa_ssl.c:115:30: Assignment
  113.   		return(-1);
  114.   		}
  115.   	if ((num != (flen+1)) || (*(p++) != 02))
                                      ^
  116.   		{
  117.   		RSAerr(RSA_F_RSA_PADDING_CHECK_SSLV23,RSA_R_BLOCK_TYPE_IS_NOT_02);

crypto/rsa/rsa_ssl.c:124:7: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `RSA_padding_check_SSLv23` 
  122.   	j=flen-1; /* one for type */
  123.   	for (i=0; i<j; i++)
  124.   		if (*(p++) == 0) break;
               ^
  125.   
  126.   	if ((i == j) || (i < 8))
