crypto/pkcs7/example.c:37: error: BUFFER_OVERRUN_L3
  Offset added: [1, +oo] Size: [0, +oo] by call to `OBJ_create`.
Showing all 11 steps of the trace


crypto/pkcs7/example.c:37:4: Call
35.   	if (signed_string_nid == -1)
36.   		signed_string_nid=
37.   			OBJ_create("1.2.3.4.5","OID_example","Our example OID");
         ^
38.   	os=ASN1_OCTET_STRING_new();
39.   	ASN1_OCTET_STRING_set(os,(unsigned char*)str,strlen(str));

crypto/objects/obj_dat.c:628:1: Parameter `ln->strlen`
  626.   	}
  627.   
  628. > int OBJ_create(char *oid, char *sn, char *ln)
  629.   	{
  630.   	int ok=0;

crypto/objects/obj_dat.c:647:5: Call
  645.   	if (op == NULL) 
  646.   		goto err;
  647.   	ok=OBJ_add_object(op);
             ^
  648.   err:
  649.   	ASN1_OBJECT_free(op);

crypto/objects/obj_dat.c:214:1: Parameter `*obj->ln`
    212.   	}
    213.   
    214. > int OBJ_add_object(ASN1_OBJECT *obj)
    215.   	{
    216.   	ASN1_OBJECT *o;

crypto/objects/obj_dat.c:222:9: Call
    220.   	if (added == NULL)
    221.   		if (!init_added()) return(0);
    222.   	if ((o=OBJ_dup(obj)) == NULL) goto err;
                   ^
    223.   	ao[ADDED_DATA]=NULL;
    224.   	ao[ADDED_SNAME]=NULL;

crypto/objects/obj_lib.c:65:1: <Offset trace>
63.   #include <openssl/buffer.h>
64.   
65. > ASN1_OBJECT *OBJ_dup(ASN1_OBJECT *o)
66.   	{
67.   	ASN1_OBJECT *r;

crypto/objects/obj_lib.c:65:1: Parameter `o->ln->strlen`
      63.   #include <openssl/buffer.h>
      64.   
      65. > ASN1_OBJECT *OBJ_dup(ASN1_OBJECT *o)
      66.   	{
      67.   	ASN1_OBJECT *r;

crypto/objects/obj_lib.c:90:3: Assignment
      88.   	if (o->ln != NULL)
      89.   		{
      90.   		i=strlen(o->ln)+1;
              ^
      91.   		r->ln=ln=Malloc(i);
      92.   		if (r->ln == NULL) goto err;

crypto/objects/obj_lib.c:65:1: <Length trace>
63.   #include <openssl/buffer.h>
64.   
65. > ASN1_OBJECT *OBJ_dup(ASN1_OBJECT *o)
66.   	{
67.   	ASN1_OBJECT *r;

crypto/objects/obj_lib.c:65:1: Parameter `*o->ln`
      63.   #include <openssl/buffer.h>
      64.   
      65. > ASN1_OBJECT *OBJ_dup(ASN1_OBJECT *o)
      66.   	{
      67.   	ASN1_OBJECT *r;

crypto/objects/obj_lib.c:93:3: Array access: Offset added: [1, +oo] Size: [0, +oo] by call to `OBJ_create` 
      91.   		r->ln=ln=Malloc(i);
      92.   		if (r->ln == NULL) goto err;
      93.   		memcpy(ln,o->ln,i);
              ^
      94.   		}
      95.   
