crypto/aes/aes_cfb.c:208: error: BUFFER_OVERRUN_L2
  Offset: [0, 15] Size: 1 by call to `AES_cfbr_encrypt_block`.
Showing all 7 steps of the trace


crypto/aes/aes_cfb.c:194:1: Array declaration
192.   
193.   /* N.B. This expects the input to be packed, MS bit first */
194. > void AES_cfb1_encrypt(const unsigned char *in, unsigned char *out,
195.   		      const unsigned long length, const AES_KEY *key,
196.   		      unsigned char *ivec, int *num, const int enc)

crypto/aes/aes_cfb.c:208:2: Call
206.   	{
207.   	c[0]=(in[n/8]&(1 << (7-n%8))) ? 0x80 : 0;
208.   	AES_cfbr_encrypt_block(c,d,1,key,ivec,enc);
        ^
209.   	out[n/8]=(out[n/8]&~(1 << (7-n%8)))|((d[0]&0x80) >> (n%8));
210.   	}

crypto/aes/aes_cfb.c:176:10: <Offset trace>
174.   	num = (nbits+7)/8;
175.   	if (enc)	/* encrypt the input */
176.   	    for(n=0 ; n < num ; ++n)
                ^
177.   		out[n] = (ovec[AES_BLOCK_SIZE+n] = in[n] ^ ivec[n]);
178.   	else		/* decrypt the input */

crypto/aes/aes_cfb.c:176:10: Assignment
  174.   	num = (nbits+7)/8;
  175.   	if (enc)	/* encrypt the input */
  176.   	    for(n=0 ; n < num ; ++n)
                  ^
  177.   		out[n] = (ovec[AES_BLOCK_SIZE+n] = in[n] ^ ivec[n]);
  178.   	else		/* decrypt the input */

crypto/aes/aes_cfb.c:161:1: <Length trace>
159.   /* This expects a single block of size nbits for both in and out. Note that
160.      it corrupts any extra bits in the last byte of out */
161. > void AES_cfbr_encrypt_block(const unsigned char *in,unsigned char *out,
162.   			    const int nbits,const AES_KEY *key,
163.   			    unsigned char *ivec,const int enc)

crypto/aes/aes_cfb.c:161:1: Parameter `*out`
  159.   /* This expects a single block of size nbits for both in and out. Note that
  160.      it corrupts any extra bits in the last byte of out */
  161. > void AES_cfbr_encrypt_block(const unsigned char *in,unsigned char *out,
  162.   			    const int nbits,const AES_KEY *key,
  163.   			    unsigned char *ivec,const int enc)

crypto/aes/aes_cfb.c:177:3: Array access: Offset: [0, 15] Size: 1 by call to `AES_cfbr_encrypt_block` 
  175.   	if (enc)	/* encrypt the input */
  176.   	    for(n=0 ; n < num ; ++n)
  177.   		out[n] = (ovec[AES_BLOCK_SIZE+n] = in[n] ^ ivec[n]);
           ^
  178.   	else		/* decrypt the input */
  179.   	    for(n=0 ; n < num ; ++n)
