crypto/x509/x509spki.c:118: error: BUFFER_OVERRUN_L3
  Offset: [2, +oo] (⇐ [0, +oo] + 2) Size: [0, +oo] by call to `EVP_EncodeBlock`.
Showing all 9 steps of the trace


crypto/x509/x509spki.c:109:12: Call
107.   	char *b64_str;
108.   	int der_len;
109.   	der_len = i2d_NETSCAPE_SPKI(spki, NULL);
                  ^
110.   	der_spki = Malloc(der_len);
111.   	b64_str = Malloc(der_len * 2);

crypto/asn1/x_spki.c:117:2: Assignment
  115.   int i2d_NETSCAPE_SPKI(NETSCAPE_SPKI *a, unsigned char **pp)
  116.   	{
  117.   	M_ASN1_I2D_vars(a);
          ^
  118.   
  119.   	M_ASN1_I2D_len(a->spkac,	i2d_NETSCAPE_SPKAC);

crypto/x509/x509spki.c:109:2: Assignment
107.   	char *b64_str;
108.   	int der_len;
109.   	der_len = i2d_NETSCAPE_SPKI(spki, NULL);
        ^
110.   	der_spki = Malloc(der_len);
111.   	b64_str = Malloc(der_len * 2);

crypto/x509/x509spki.c:110:13: Array declaration
108.   	int der_len;
109.   	der_len = i2d_NETSCAPE_SPKI(spki, NULL);
110.   	der_spki = Malloc(der_len);
                   ^
111.   	b64_str = Malloc(der_len * 2);
112.   	if(!der_spki || !b64_str) {

crypto/x509/x509spki.c:110:2: Assignment
108.   	int der_len;
109.   	der_len = i2d_NETSCAPE_SPKI(spki, NULL);
110.   	der_spki = Malloc(der_len);
        ^
111.   	b64_str = Malloc(der_len * 2);
112.   	if(!der_spki || !b64_str) {

crypto/x509/x509spki.c:118:2: Call
116.   	p = der_spki;
117.   	i2d_NETSCAPE_SPKI(spki, &p);
118.   	EVP_EncodeBlock((unsigned char *)b64_str, der_spki, der_len);
        ^
119.   	Free(der_spki);
120.   	return b64_str;

crypto/evp/encode.c:188:1: <Length trace>
186.   	}
187.   
188. > int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int dlen)
189.   	{
190.   	int i,ret=0;

crypto/evp/encode.c:188:1: Parameter `*f`
  186.   	}
  187.   
  188. > int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int dlen)
  189.   	{
  190.   	int i,ret=0;

crypto/evp/encode.c:198:34: Array access: Offset: [2, +oo] (⇐ [0, +oo] + 2) Size: [0, +oo] by call to `EVP_EncodeBlock` 
  196.   			{
  197.   			l=	(((unsigned long)f[0])<<16L)|
  198.   				(((unsigned long)f[1])<< 8L)|f[2];
                                          ^
  199.   			*(t++)=conv_bin2ascii(l>>18L);
  200.   			*(t++)=conv_bin2ascii(l>>12L);
