apps/s_client.c:1467: error: BUFFER_OVERRUN_L3
  Offset added: [48, +oo] (⇐ [0, +oo] + 48) Size: [1, +oo] by call to `SSL_CTX_add_client_custom_ext`.
Showing all 13 steps of the trace


apps/s_client.c:1467:14: Call
1465.   
1466.       for (i = 0; i < serverinfo_count; i++) {
1467.           if (!SSL_CTX_add_client_custom_ext(ctx,
                     ^
1468.                                              serverinfo_types[i],
1469.                                              NULL, NULL, NULL,

ssl/t1_ext.c:246:1: Parameter `ctx->cert->cli_ext.meths_count`
  244.   
  245.   /* Application level functions to add custom extension callbacks */
  246. > int SSL_CTX_add_client_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
  247.                                     custom_ext_add_cb add_cb,
  248.                                     custom_ext_free_cb free_cb,

ssl/t1_ext.c:253:12: Call
  251.                                     void *parse_arg)
  252.   {
  253.       return custom_ext_meth_add(&ctx->cert->cli_ext, ext_type,
                    ^
  254.                                  add_cb, free_cb, add_arg, parse_cb, parse_arg);
  255.   }

ssl/t1_ext.c:201:1: Parameter `exts->meths_count`
    199.   
    200.   /* Set callbacks for a custom extension. */
    201. > static int custom_ext_meth_add(custom_ext_methods *exts,
    202.                                  unsigned int ext_type,
    203.                                  custom_ext_add_cb add_cb,

apps/s_client.c:1467:14: Call
1465.   
1466.       for (i = 0; i < serverinfo_count; i++) {
1467.           if (!SSL_CTX_add_client_custom_ext(ctx,
                     ^
1468.                                              serverinfo_types[i],
1469.                                              NULL, NULL, NULL,

ssl/t1_ext.c:246:1: Parameter `ctx->cert->cli_ext.meths_count`
  244.   
  245.   /* Application level functions to add custom extension callbacks */
  246. > int SSL_CTX_add_client_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
  247.                                     custom_ext_add_cb add_cb,
  248.                                     custom_ext_free_cb free_cb,

ssl/t1_ext.c:253:12: Call
  251.                                     void *parse_arg)
  252.   {
  253.       return custom_ext_meth_add(&ctx->cert->cli_ext, ext_type,
                    ^
  254.                                  add_cb, free_cb, add_arg, parse_cb, parse_arg);
  255.   }

ssl/t1_ext.c:201:1: <Length trace>
199.   
200.   /* Set callbacks for a custom extension. */
201. > static int custom_ext_meth_add(custom_ext_methods *exts,
202.                                  unsigned int ext_type,
203.                                  custom_ext_add_cb add_cb,

ssl/t1_ext.c:201:1: Parameter `exts->meths_count`
    199.   
    200.   /* Set callbacks for a custom extension. */
    201. > static int custom_ext_meth_add(custom_ext_methods *exts,
    202.                                  unsigned int ext_type,
    203.                                  custom_ext_add_cb add_cb,

ssl/t1_ext.c:222:9: Call
    220.           return 0;
    221.       /* Search for duplicate */
    222.       if (custom_ext_find(exts, ext_type))
                   ^
    223.           return 0;
    224.       exts->meths = OPENSSL_realloc(exts->meths,

ssl/t1_ext.c:62:1: Parameter `exts->meths_count`
      60.   
      61.   /* Find a custom extension from the list. */
      62. > static custom_ext_method *custom_ext_find(custom_ext_methods *exts,
      63.                                             unsigned int ext_type)
      64.   {

ssl/t1_ext.c:233:5: Assignment
    231.       }
    232.   
    233.       meth = exts->meths + exts->meths_count;
               ^
    234.       memset(meth, 0, sizeof(*meth));
    235.       meth->parse_cb = parse_cb;

ssl/t1_ext.c:234:5: Array access: Offset added: [48, +oo] (⇐ [0, +oo] + 48) Size: [1, +oo] by call to `SSL_CTX_add_client_custom_ext` 
    232.   
    233.       meth = exts->meths + exts->meths_count;
    234.       memset(meth, 0, sizeof(*meth));
               ^
    235.       meth->parse_cb = parse_cb;
    236.       meth->add_cb = add_cb;
