ssl/s3_cbc.c:675: error: BUFFER_OVERRUN_L2
  Offset: [-72, 79] Size: 16.
Showing all 5 steps of the trace


ssl/s3_cbc.c:418:2: <Offset trace>
416.   	void (*md_final_raw)(void *ctx, unsigned char *md_out);
417.   	void (*md_transform)(void *ctx, const unsigned char *block);
418.   	unsigned md_size, md_block_size = 64;
        ^
419.   	unsigned sslv3_pad_length = 40, header_length, variance_blocks,
420.   		 len, max_mac_bytes, num_blocks,

ssl/s3_cbc.c:418:2: Assignment
416.   	void (*md_final_raw)(void *ctx, unsigned char *md_out);
417.   	void (*md_transform)(void *ctx, const unsigned char *block);
418.   	unsigned md_size, md_block_size = 64;
        ^
419.   	unsigned sslv3_pad_length = 40, header_length, variance_blocks,
420.   		 len, max_mac_bytes, num_blocks,

ssl/s3_cbc.c:402:1: <Length trace>
400.    * padding too. ) 
401.    */
402. > void ssl3_cbc_digest_record(
403.   	const EVP_MD_CTX *ctx,
404.   	unsigned char* md_out,

ssl/s3_cbc.c:402:1: Array declaration
400.    * padding too. ) 
401.    */
402. > void ssl3_cbc_digest_record(
403.   	const EVP_MD_CTX *ctx,
404.   	unsigned char* md_out,

ssl/s3_cbc.c:675:18: Array access: Offset: [-72, 79] Size: 16
673.   				/* If this is index_b, write a length byte. */
674.   				b = constant_time_select_8(
675.   					is_block_b, length_bytes[j-(md_block_size-md_length_size)], b);
                        ^
676.   				}
677.   			block[j] = b;
