crypto/ct/ct_oct.c:346: error: BUFFER_OVERRUN_L3
  Offset: 42 (⇐ 41 + 1) Size: [1, +oo].
Showing all 14 steps of the trace


crypto/ct/ct_oct.c:306:1: <Length trace>
304.   }
305.   
306. > int i2o_SCT(const SCT *sct, unsigned char **out)
307.   {
308.       size_t len;

crypto/ct/ct_oct.c:306:1: Parameter `**out`
304.   }
305.   
306. > int i2o_SCT(const SCT *sct, unsigned char **out)
307.   {
308.       size_t len;

crypto/ct/ct_oct.c:330:9: Assignment
328.   
329.       if (*out != NULL) {
330.           p = *out;
               ^
331.           *out += len;
332.       } else {

crypto/ct/ct_oct.c:342:10: Assignment
340.   
341.       if (sct->version == SCT_V1) {
342.           *p++ = sct->version;
                ^
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;

crypto/ct/ct_oct.c:344:9: Assignment
342.           *p++ = sct->version;
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
               ^
345.           l2n8(sct->timestamp, p);
346.           s2n(sct->ext_len, p);

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:345:9: Assignment
343.           memcpy(p, sct->log_id, SCT_V1_HASHLEN);
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
               ^
346.           s2n(sct->ext_len, p);
347.           if (sct->ext_len > 0) {

crypto/ct/ct_oct.c:346:9: Array access: Offset: 42 (⇐ 41 + 1) Size: [1, +oo]
344.           p += SCT_V1_HASHLEN;
345.           l2n8(sct->timestamp, p);
346.           s2n(sct->ext_len, p);
               ^
347.           if (sct->ext_len > 0) {
348.               memcpy(p, sct->ext, sct->ext_len);
