ssl/t1_lib.c:2410: error: BUFFER_OVERRUN_L2
  Offset: [0, 7] Size: 7.
Showing all 5 steps of the trace


ssl/t1_lib.c:2371:21: <Offset trace>
2369.                   /* Work out which GOST certificate is available */
2370.                   if (ssl_has_cert(s, SSL_PKEY_GOST12_512)) {
2371.                       idx = SSL_PKEY_GOST12_512;
                            ^
2372.                   } else if (ssl_has_cert(s, SSL_PKEY_GOST12_256)) {
2373.                       idx = SSL_PKEY_GOST12_256;

ssl/t1_lib.c:2371:21: Assignment
2369.                   /* Work out which GOST certificate is available */
2370.                   if (ssl_has_cert(s, SSL_PKEY_GOST12_512)) {
2371.                       idx = SSL_PKEY_GOST12_512;
                            ^
2372.                   } else if (ssl_has_cert(s, SSL_PKEY_GOST12_256)) {
2373.                       idx = SSL_PKEY_GOST12_256;

ssl/t1_lib.c:2306:1: <Length trace>
2304.    * to the server. In this case no error is set.
2305.    */
2306. > int tls_choose_sigalg(SSL *s, int *al)
2307.   {
2308.       int idx = -1;

ssl/t1_lib.c:2306:1: Parameter `s->cert->pkeys[*]`
2304.    * to the server. In this case no error is set.
2305.    */
2306. > int tls_choose_sigalg(SSL *s, int *al)
2307.   {
2308.       int idx = -1;

ssl/t1_lib.c:2410:55: Array access: Offset: [0, 7] Size: 7
2408.                   /* For Suite B need to match signature algorithm to curve */
2409.                   if (tls1_suiteb(s)) {
2410.                       EC_KEY *ec = EVP_PKEY_get0_EC_KEY(s->cert->pkeys[idx].privatekey);
                                                              ^
2411.                       curve = EC_GROUP_get_curve_name(EC_KEY_get0_group(ec));
2412.                   } else {
