crypto/bio/b_sock.c:279: error: BUFFER_OVERRUN_L2
  Offset added: [`(*a->h_aliases)->strlen` + 2, `(*a->h_aliases)->strlen` + 2] Size: [`(*a->h_aliases)->strlen` + 1, `(*a->h_aliases)->strlen` + 1].
Showing all 9 steps of the trace


crypto/bio/b_sock.c:248:1: <Offset trace>
246.   	}
247.   
248. > static struct hostent *ghbn_dup(struct hostent *a)
249.   	{
250.   	struct hostent *ret;

crypto/bio/b_sock.c:248:1: Parameter `(*a->h_aliases)->strlen`
246.   	}
247.   
248. > static struct hostent *ghbn_dup(struct hostent *a)
249.   	{
250.   	struct hostent *ret;

crypto/bio/b_sock.c:277:3: Assignment
275.   	for (i=0; a->h_aliases[i] != NULL; i++)
276.   		{
277.   		j=strlen(a->h_aliases[i])+1;
         ^
278.   		if ((ret->h_aliases[i]=Malloc(j)) == NULL) goto err;
279.   		memcpy(ret->h_aliases[i],a->h_aliases[i],j+1);

crypto/bio/b_sock.c:248:1: <Length trace>
246.   	}
247.   
248. > static struct hostent *ghbn_dup(struct hostent *a)
249.   	{
250.   	struct hostent *ret;

crypto/bio/b_sock.c:248:1: Parameter `(*a->h_aliases)->strlen`
246.   	}
247.   
248. > static struct hostent *ghbn_dup(struct hostent *a)
249.   	{
250.   	struct hostent *ret;

crypto/bio/b_sock.c:277:3: Assignment
275.   	for (i=0; a->h_aliases[i] != NULL; i++)
276.   		{
277.   		j=strlen(a->h_aliases[i])+1;
         ^
278.   		if ((ret->h_aliases[i]=Malloc(j)) == NULL) goto err;
279.   		memcpy(ret->h_aliases[i],a->h_aliases[i],j+1);

crypto/bio/b_sock.c:278:26: Array declaration
276.   		{
277.   		j=strlen(a->h_aliases[i])+1;
278.   		if ((ret->h_aliases[i]=Malloc(j)) == NULL) goto err;
                                ^
279.   		memcpy(ret->h_aliases[i],a->h_aliases[i],j+1);
280.   		}

crypto/bio/b_sock.c:278:8: Assignment
276.   		{
277.   		j=strlen(a->h_aliases[i])+1;
278.   		if ((ret->h_aliases[i]=Malloc(j)) == NULL) goto err;
              ^
279.   		memcpy(ret->h_aliases[i],a->h_aliases[i],j+1);
280.   		}

crypto/bio/b_sock.c:279:3: Array access: Offset added: [(*a->h_aliases)->strlen + 2, (*a->h_aliases)->strlen + 2] Size: [(*a->h_aliases)->strlen + 1, (*a->h_aliases)->strlen + 1]
277.   		j=strlen(a->h_aliases[i])+1;
278.   		if ((ret->h_aliases[i]=Malloc(j)) == NULL) goto err;
279.   		memcpy(ret->h_aliases[i],a->h_aliases[i],j+1);
         ^
280.   		}
281.   	ret->h_length=a->h_length;
