apps/speed.c:1007: error: BUFFER_OVERRUN_L1
  Offset: 31 (⇐ 28 + 3) Size: 16 by call to `Camellia_set_key`.
Showing all 7 steps of the trace


apps/speed.c:632:5: Array declaration
630.       CAST_KEY cast_ks;
631.   #endif
632.       static const unsigned char key16[16] = {
           ^
633.           0x12, 0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0,
634.           0x34, 0x56, 0x78, 0x9a, 0xbc, 0xde, 0xf0, 0x12

apps/speed.c:1007:5: Call
1005.   #endif
1006.   #ifndef OPENSSL_NO_CAMELLIA
1007.       Camellia_set_key(key16, 128, &camellia_ks1);
            ^
1008.       Camellia_set_key(ckey24, 192, &camellia_ks2);
1009.       Camellia_set_key(ckey32, 256, &camellia_ks3);

crypto/camellia/cmll_misc.c:56:1: Parameter `*userKey`
  54.   #include "cmll_locl.h"
  55.   
  56. > int Camellia_set_key(const unsigned char *userKey, const int bits,
  57.                        CAMELLIA_KEY *key)
  58.   {

crypto/camellia/cmll_misc.c:63:25: Call
  61.       if (bits != 128 && bits != 192 && bits != 256)
  62.           return -2;
  63.       key->grand_rounds = Camellia_Ekeygen(bits, userKey, key->u.rd_key);
                                ^
  64.       return 0;
  65.   }

crypto/camellia/camellia.c:363:1: <Length trace>
361.   } while (0)
362.   
363. > int Camellia_Ekeygen(int keyBitLength, const u8 *rawKey, KEY_TABLE_TYPE k)
364.   {
365.       register u32 s0, s1, s2, s3;

crypto/camellia/camellia.c:363:1: Parameter `*rawKey`
    361.   } while (0)
    362.   
    363. > int Camellia_Ekeygen(int keyBitLength, const u8 *rawKey, KEY_TABLE_TYPE k)
    364.   {
    365.       register u32 s0, s1, s2, s3;

crypto/camellia/camellia.c:380:26: Array access: Offset: 31 (⇐ 28 + 3) Size: 16 by call to `Camellia_set_key` 
    378.           } else {
    379.               k[10] = s2 = GETU32(rawKey + 24);
    380.               k[11] = s3 = GETU32(rawKey + 28);
                                    ^
    381.           }
    382.           s0 ^= k[0], s1 ^= k[1], s2 ^= k[2], s3 ^= k[3];
