apps/passwd.c:273: error: BUFFER_OVERRUN_L3
  Offset: [8, 256] Size: [10, 258] by call to `do_passwd`.
Showing all 7 steps of the trace


apps/passwd.c:118:5: Assignment
116.   {
117.       BIO *in = NULL;
118.       char *infile = NULL, *salt = NULL, *passwd = NULL, **passwds = NULL;
           ^
119.       char *salt_malloc = NULL, *passwd_malloc = NULL, *prog;
120.       OPTION_CHOICE o;

apps/passwd.c:273:22: Call
271.                   }
272.   
273.                   if (!do_passwd
                            ^
274.                       (passed_salt, &salt, &salt_malloc, passwd, bio_out, quiet,
275.                        table, reverse, pw_maxlen, usecrypt, use1, useapr1))

apps/passwd.c:412:1: <Offset trace>
410.   # endif
411.   
412. > static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
413.                        char *passwd, BIO *out, int quiet, int table,
414.                        int reverse, size_t pw_maxlen, int usecrypt, int use1,

apps/passwd.c:412:1: Parameter `pw_maxlen`
  410.   # endif
  411.   
  412. > static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
  413.                        char *passwd, BIO *out, int quiet, int table,
  414.                        int reverse, size_t pw_maxlen, int usecrypt, int use1,

apps/passwd.c:412:1: <Length trace>
410.   # endif
411.   
412. > static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
413.                        char *passwd, BIO *out, int quiet, int table,
414.                        int reverse, size_t pw_maxlen, int usecrypt, int use1,

apps/passwd.c:412:1: Parameter `*passwd`
  410.   # endif
  411.   
  412. > static int do_passwd(int passed_salt, char **salt_p, char **salt_malloc_p,
  413.                        char *passwd, BIO *out, int quiet, int table,
  414.                        int reverse, size_t pw_maxlen, int usecrypt, int use1,

apps/passwd.c:469:9: Array access: Offset: [8, 256] Size: [10, 258] by call to `do_passwd` 
  467.                          "Warning: truncating password to %u characters\n",
  468.                          (unsigned)pw_maxlen);
  469.           passwd[pw_maxlen] = 0;
                 ^
  470.       }
  471.       assert(strlen(passwd) <= pw_maxlen);
