apps/rsa.c:277: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `i2d_Netscape_RSA`.
Showing all 14 steps of the trace


apps/rsa.c:270:8: Call
268.   
269.   		i=1;
270.   		size=i2d_Netscape_RSA(rsa,NULL,NULL);
              ^
271.   		if ((p=(unsigned char *)Malloc(size)) == NULL)
272.   			{

crypto/asn1/n_pkey.c:104:2: Assignment
  102.   	X509_ALGOR *alg=NULL;
  103.   	ASN1_OCTET_STRING os,os2;
  104.   	M_ASN1_I2D_vars(a);
          ^
  105.   
  106.   	if (a == NULL) return(0);

apps/rsa.c:270:3: Assignment
268.   
269.   		i=1;
270.   		size=i2d_Netscape_RSA(rsa,NULL,NULL);
         ^
271.   		if ((p=(unsigned char *)Malloc(size)) == NULL)
272.   			{

apps/rsa.c:271:27: Array declaration
269.   		i=1;
270.   		size=i2d_Netscape_RSA(rsa,NULL,NULL);
271.   		if ((p=(unsigned char *)Malloc(size)) == NULL)
                                 ^
272.   			{
273.   			BIO_printf(bio_err,"Malloc failure\n");

apps/rsa.c:271:8: Assignment
269.   		i=1;
270.   		size=i2d_Netscape_RSA(rsa,NULL,NULL);
271.   		if ((p=(unsigned char *)Malloc(size)) == NULL)
              ^
272.   			{
273.   			BIO_printf(bio_err,"Malloc failure\n");

apps/rsa.c:277:3: Call
275.   			}
276.   		pp=p;
277.   		i2d_Netscape_RSA(rsa,&p,NULL);
         ^
278.   		BIO_write(out,(char *)pp,size);
279.   		Free(pp);

crypto/asn1/n_pkey.c:95:1: Parameter `**pp`
  93.   #endif
  94.   
  95. > int i2d_Netscape_RSA(RSA *a, unsigned char **pp, int (*cb)())
  96.   	{
  97.   	int i,j,l[6];

crypto/asn1/n_pkey.c:189:2: Assignment
  187.   	EVP_CIPHER_CTX_cleanup(&ctx);
  188.   
  189.   	p= *pp;
          ^
  190.   	ASN1_put_object(&p,1,l[4]+l[3],V_ASN1_SEQUENCE,V_ASN1_UNIVERSAL);
  191.   	i2d_ASN1_OCTET_STRING(&os,&p);

crypto/asn1/n_pkey.c:190:2: Call
  188.   
  189.   	p= *pp;
  190.   	ASN1_put_object(&p,1,l[4]+l[3],V_ASN1_SEQUENCE,V_ASN1_UNIVERSAL);
          ^
  191.   	i2d_ASN1_OCTET_STRING(&os,&p);
  192.   	ASN1_put_object(&p,1,l[2]+l[1],V_ASN1_SEQUENCE,V_ASN1_UNIVERSAL);

crypto/asn1/asn1_lib.c:186:1: <Length trace>
184.   /* class 0 is constructed
185.    * constructed == 2 for indefinitle length constructed */
186. > void ASN1_put_object(unsigned char **pp, int constructed, int length, int tag,
187.   	     int xclass)
188.   	{

crypto/asn1/asn1_lib.c:186:1: Parameter `**pp`
    184.   /* class 0 is constructed
    185.    * constructed == 2 for indefinitle length constructed */
    186. > void ASN1_put_object(unsigned char **pp, int constructed, int length, int tag,
    187.   	     int xclass)
    188.   	{

crypto/asn1/asn1_lib.c:189:2: Assignment
    187.   	     int xclass)
    188.   	{
    189.   	unsigned char *p= *pp;
            ^
    190.   	int i;
    191.   

crypto/asn1/asn1_lib.c:198:5: Assignment
    196.   	else
    197.   		{
    198.   		*(p++)=i|V_ASN1_PRIMATIVE_TAG;
               ^
    199.   		while (tag > 0x7f)
    200.   			{

crypto/asn1/asn1_lib.c:204:3: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `i2d_Netscape_RSA` 
    202.   			tag>>=7;
    203.   			}
    204.   		*(p++)=(tag&0x7f);
             ^
    205.   		}
    206.   	if ((constructed == 2) && (length == 0))
