crypto/x509/t_crl.c:50: error: BUFFER_OVERRUN_L3
  Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline`.
Showing all 6 steps of the trace


crypto/x509/t_crl.c:50:9: Call
48.       X509_CRL_get0_signature(x, &sig, &sig_alg);
49.       X509_signature_print(out, sig_alg, NULL);
50.       p = X509_NAME_oneline(X509_CRL_get_issuer(x), NULL, 0);
              ^
51.       BIO_printf(out, "%8sIssuer: %s\n", "", p);
52.       OPENSSL_free(p);

crypto/x509/x509_obj.c:25:1: <Offset trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
26.   {
27.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `len`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  26.   {
  27.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: <Length trace>
23.   #define NAME_ONELINE_MAX    (1024 * 1024)
24.   
25. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
26.   {
27.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:25:1: Parameter `*buf`
  23.   #define NAME_ONELINE_MAX    (1024 * 1024)
  24.   
  25. > char *X509_NAME_oneline(X509_NAME *a, char *buf, int len)
  26.   {
  27.       X509_NAME_ENTRY *ne;

crypto/x509/x509_obj.c:57:9: Array access: Offset: [-1, 199] Size: [1, 2147483644] by call to `X509_NAME_oneline` 
  55.           }
  56.           strncpy(buf, "NO X509_NAME", len);
  57.           buf[len - 1] = '\0';
                ^
  58.           return buf;
  59.       }
