crypto/rsa/rsa_eay.c:189: error: BUFFER_OVERRUN_L3
  Offset: 1 Size: [0, +oo] by call to `RSA_padding_add_PKCS1_type_1`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:179:6: Call
177.   
178.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
179.   	num=BN_num_bytes(rsa->n);
            ^
180.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
181.   		{

crypto/bn/bn_lib.c:245:19: Assignment
  243.   	bn_check_top(a);
  244.   
  245.   	if (a->top == 0) return(0);
                           ^
  246.   	l=a->d[a->top-1];
  247.   	i=(a->top-1)*BN_BITS2;

crypto/rsa/rsa_eay.c:179:2: Assignment
177.   
178.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
179.   	num=BN_num_bytes(rsa->n);
        ^
180.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
181.   		{

crypto/rsa/rsa_eay.c:180:28: Array declaration
178.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
179.   	num=BN_num_bytes(rsa->n);
180.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
                                  ^
181.   		{
182.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:180:7: Assignment
178.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
179.   	num=BN_num_bytes(rsa->n);
180.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
             ^
181.   		{
182.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:189:5: Call
187.   		{
188.   	case RSA_PKCS1_PADDING:
189.   		i=RSA_padding_add_PKCS1_type_1(buf,num,from,flen);
           ^
190.   		break;
191.   	case RSA_NO_PADDING:

crypto/rsa/rsa_pk1.c:65:1: <Length trace>
63.   #include <openssl/rand.h>
64.   
65. > int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,
66.   	     unsigned char *from, int flen)
67.   	{

crypto/rsa/rsa_pk1.c:65:1: Parameter `*to`
  63.   #include <openssl/rand.h>
  64.   
  65. > int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,
  66.   	     unsigned char *from, int flen)
  67.   	{

crypto/rsa/rsa_pk1.c:77:2: Assignment
  75.   		}
  76.   	
  77.   	p=(unsigned char *)to;
         ^
  78.   
  79.   	*(p++)=0;

crypto/rsa/rsa_pk1.c:79:4: Assignment
  77.   	p=(unsigned char *)to;
  78.   
  79.   	*(p++)=0;
           ^
  80.   	*(p++)=1; /* Private Key BT (Block Type) */
  81.   

crypto/rsa/rsa_pk1.c:80:2: Array access: Offset: 1 Size: [0, +oo] by call to `RSA_padding_add_PKCS1_type_1` 
  78.   
  79.   	*(p++)=0;
  80.   	*(p++)=1; /* Private Key BT (Block Type) */
         ^
  81.   
  82.   	/* padd out with 0xff data */
