crypto/x509/x509_vfy.c:369: error: BUFFER_OVERRUN_L3
  Offset: [15, 17] (⇐ [10, 12] + 5) Size: [0, +oo] by call to `X509_cmp_current_time`.
Showing all 11 steps of the trace


crypto/x509/x509_vfy.c:333:14: Call
331.   		if (!xs->valid)
332.   			{
333.   			if ((pkey=X509_get_pubkey(xi)) == NULL)
                    ^
334.   				{
335.   				ctx->error=X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY;

crypto/x509/x509_cmp.c:243:9: Call
  241.   	if ((x == NULL) || (x->cert_info == NULL))
  242.   		return(NULL);
  243.   	return(X509_PUBKEY_get(x->cert_info->key));
                 ^
  244.   	}
  245.   

crypto/asn1/x_pubkey.c:239:9: Call
    237.   			p=a->parameter->value.sequence->data;
    238.   			j=a->parameter->value.sequence->length;
    239.   			if (!d2i_DSAparams(&ret->pkey.dsa,&p,(long)j))
                   ^
    240.   				goto err;
    241.   			}

crypto/asn1/d2i_dsap.c:79:2: Call
      77.   	M_ASN1_D2I_Init();
      78.   	M_ASN1_D2I_start_sequence();
      79.   	M_ASN1_D2I_get(bs,d2i_ASN1_INTEGER);
             ^
      80.   	if ((ret->p=BN_bin2bn(bs->data,bs->length,ret->p)) == NULL) goto err_bn;
      81.   	M_ASN1_D2I_get(bs,d2i_ASN1_INTEGER);

crypto/asn1/a_int.c:158:1: Parameter `*(*a)->data`
        156.   	}
        157.   
        158. > ASN1_INTEGER *d2i_ASN1_INTEGER(ASN1_INTEGER **a, unsigned char **pp,
        159.   	     long length)
        160.   	{

crypto/x509/x509_vfy.c:369:5: Call
367.   			}
368.   
369.   		i=X509_cmp_current_time(X509_get_notAfter(xs));
           ^
370.   		if (i == 0)
371.   			{

crypto/x509/x509_vfy.c:405:1: <Length trace>
403.   	}
404.   
405. > int X509_cmp_current_time(ASN1_UTCTIME *ctm)
406.   	{
407.   	char *str;

crypto/x509/x509_vfy.c:405:1: Parameter `*ctm->data`
  403.   	}
  404.   
  405. > int X509_cmp_current_time(ASN1_UTCTIME *ctm)
  406.   	{
  407.   	char *str;

crypto/x509/x509_vfy.c:415:2: Assignment
  413.   	p=buff1;
  414.   	i=ctm->length;
  415.   	str=(char *)ctm->data;
          ^
  416.   	if ((i < 11) || (i > 17)) return(0);
  417.   	memcpy(p,str,10);

crypto/x509/x509_vfy.c:419:2: Assignment
  417.   	memcpy(p,str,10);
  418.   	p+=10;
  419.   	str+=10;
          ^
  420.   
  421.   	if ((*str == 'Z') || (*str == '-') || (*str == '+'))

crypto/x509/x509_vfy.c:431:25: Array access: Offset: [15, 17] (⇐ [10, 12] + 5) Size: [0, +oo] by call to `X509_cmp_current_time` 
  429.   	else
  430.   		{
  431.   		if ((*str != '+') && (str[5] != '-'))
                                 ^
  432.   			return(0);
  433.   		offset=((str[1]-'0')*10+(str[2]-'0'))*60;
