crypto/asn1/asn1_par.c:218: error: BUFFER_OVERRUN_L3
  Offset added: [1, 2147483647] Size: [8, 17179869176] by call to `d2i_ASN1_OBJECT`.
Showing all 11 steps of the trace


crypto/asn1/asn1_par.c:218:21: Call
216.               } else if (tag == V_ASN1_OBJECT) {
217.                   opp = op;
218.                   if (d2i_ASN1_OBJECT(&o, &opp, len + hl) != NULL) {
                           ^
219.                       if (BIO_write(bp, ":", 1) <= 0)
220.                           goto end;

crypto/asn1/a_object.c:243:1: Parameter `*(*a)->data`
  241.   }
  242.   
  243. > ASN1_OBJECT *d2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
  244.                                long length)
  245.   {

crypto/asn1/asn1_par.c:218:21: Call
216.               } else if (tag == V_ASN1_OBJECT) {
217.                   opp = op;
218.                   if (d2i_ASN1_OBJECT(&o, &opp, len + hl) != NULL) {
                           ^
219.                       if (BIO_write(bp, ":", 1) <= 0)
220.                           goto end;

crypto/asn1/a_object.c:243:1: Parameter `*(*a)->data`
  241.   }
  242.   
  243. > ASN1_OBJECT *d2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
  244.                                long length)
  245.   {

crypto/asn1/a_object.c:262:11: Call
  260.           goto err;
  261.       }
  262.       ret = c2i_ASN1_OBJECT(a, &p, len);
                   ^
  263.       if (ret)
  264.           *pp = p;

crypto/asn1/a_object.c:271:1: <Offset trace>
269.   }
270.   
271. > ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
272.                                long len)
273.   {

crypto/asn1/a_object.c:271:1: Parameter `(*a)->length`
    269.   }
    270.   
    271. > ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
    272.                                long len)
    273.   {

crypto/asn1/a_object.c:271:1: <Length trace>
269.   }
270.   
271. > ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
272.                                long len)
273.   {

crypto/asn1/a_object.c:271:1: Parameter `*(*a)->data`
    269.   }
    270.   
    271. > ASN1_OBJECT *c2i_ASN1_OBJECT(ASN1_OBJECT **a, const unsigned char **pp,
    272.                                long len)
    273.   {

crypto/asn1/a_object.c:334:5: Assignment
    332.       p = *pp;
    333.       /* detach data from object */
    334.       data = (unsigned char *)ret->data;
               ^
    335.       ret->data = NULL;
    336.       /* once detached we can change it */

crypto/asn1/a_object.c:347:5: Array access: Offset added: [1, 2147483647] Size: [8, 17179869176] by call to `d2i_ASN1_OBJECT` 
    345.           ret->flags |= ASN1_OBJECT_FLAG_DYNAMIC_DATA;
    346.       }
    347.       memcpy(data, p, length);
               ^
    348.       /* reattach data to object, after which it remains const */
    349.       ret->data = data;
