crypto/rsa/rsa_eay.c:382: error: BUFFER_OVERRUN_L3
  Offset: 1 Size: [0, +oo] by call to `RSA_padding_check_PKCS1_type_1`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:348:6: Call
346.   	if (ctx == NULL) goto err;
347.   
348.   	num=BN_num_bytes(rsa->n);
            ^
349.   	buf=(unsigned char *)Malloc(num);
350.   	if (buf == NULL)

crypto/bn/bn_lib.c:245:19: Assignment
  243.   	bn_check_top(a);
  244.   
  245.   	if (a->top == 0) return(0);
                           ^
  246.   	l=a->d[a->top-1];
  247.   	i=(a->top-1)*BN_BITS2;

crypto/rsa/rsa_eay.c:348:2: Assignment
346.   	if (ctx == NULL) goto err;
347.   
348.   	num=BN_num_bytes(rsa->n);
        ^
349.   	buf=(unsigned char *)Malloc(num);
350.   	if (buf == NULL)

crypto/rsa/rsa_eay.c:349:23: Array declaration
347.   
348.   	num=BN_num_bytes(rsa->n);
349.   	buf=(unsigned char *)Malloc(num);
                             ^
350.   	if (buf == NULL)
351.   		{

crypto/rsa/rsa_eay.c:349:2: Assignment
347.   
348.   	num=BN_num_bytes(rsa->n);
349.   	buf=(unsigned char *)Malloc(num);
        ^
350.   	if (buf == NULL)
351.   		{

crypto/rsa/rsa_eay.c:382:5: Call
380.   		{
381.   	case RSA_PKCS1_PADDING:
382.   		r=RSA_padding_check_PKCS1_type_1(to,num,buf,i,num);
           ^
383.   		break;
384.   	case RSA_NO_PADDING:

crypto/rsa/rsa_pk1.c:91:1: <Length trace>
89.   	}
90.   
91. > int RSA_padding_check_PKCS1_type_1(unsigned char *to, int tlen,
92.   	     unsigned char *from, int flen, int num)
93.   	{

crypto/rsa/rsa_pk1.c:91:1: Parameter `*from`
  89.   	}
  90.   
  91. > int RSA_padding_check_PKCS1_type_1(unsigned char *to, int tlen,
  92.   	     unsigned char *from, int flen, int num)
  93.   	{

crypto/rsa/rsa_pk1.c:97:2: Assignment
  95.   	unsigned char *p;
  96.   
  97.   	p=from;
          ^
  98.   	if ((num != (flen+1)) || (*(p++) != 01))
  99.   		{

crypto/rsa/rsa_pk1.c:98:30: Assignment
  96.   
  97.   	p=from;
  98.   	if ((num != (flen+1)) || (*(p++) != 01))
                                      ^
  99.   		{
  100.   		RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1,RSA_R_BLOCK_TYPE_IS_NOT_01);

crypto/rsa/rsa_pk1.c:108:7: Array access: Offset: 1 Size: [0, +oo] by call to `RSA_padding_check_PKCS1_type_1` 
  106.   	for (i=0; i<j; i++)
  107.   		{
  108.   		if (*p != 0xff) /* should decrypt to 0xff */
               ^
  109.   			{
  110.   			if (*p == 0)
