crypto/x509v3/v3_alt.c:104: error: BUFFER_OVERRUN_L2
  Offset: [-oo, 1048576] Size: 256 by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


crypto/x509v3/v3_alt.c:64:1: Array declaration
62.   }
63.   
64. > STACK_OF(CONF_VALUE) *i2v_GENERAL_NAME(X509V3_EXT_METHOD *method,
65.                                          GENERAL_NAME *gen,
66.                                          STACK_OF(CONF_VALUE) *ret)

crypto/x509v3/v3_alt.c:104:13: Call
102.   
103.       case GEN_DIRNAME:
104.           if (X509_NAME_oneline(gen->d.dirn, oline, sizeof(oline)) == NULL
                   ^
105.                   || !X509V3_add_value("DirName", oline, &ret))
106.               return NULL;

crypto/x509/x509_obj.c:24:1: <Length trace>
22.   #define NAME_ONELINE_MAX    (1024 * 1024)
23.   
24. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
25.   {
26.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:24:1: Parameter `*buf`
  22.   #define NAME_ONELINE_MAX    (1024 * 1024)
  23.   
  24. > char *X509_NAME_oneline(const X509_NAME *a, char *buf, int len)
  25.   {
  26.       const X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:133:13: Assignment
  131.               break;
  132.           } else
  133.               p = &(buf[lold]);
                     ^
  134.           *(p++) = '/';
  135.           memcpy(p, s, (unsigned int)l1);

crypto/x509/x509_obj.c:134:9: Array access: Offset: [-oo, 1048576] Size: 256 by call to `X509_NAME_oneline` 
  132.           } else
  133.               p = &(buf[lold]);
  134.           *(p++) = '/';
                 ^
  135.           memcpy(p, s, (unsigned int)l1);
  136.           p += l1;
