crypto/rand/drbg_lib.c:402: error: BUFFER_OVERRUN_L3
  Offset added: [0, 15] Size: [0, +oo] by call to `RAND_DRBG_generate`.
Showing all 10 steps of the trace


crypto/rand/drbg_lib.c:385:1: Parameter `count`
383.   }
384.   
385. > static int drbg_bytes(unsigned char *out, int count)
386.   {
387.       int ret = 0;

crypto/rand/drbg_lib.c:399:9: Assignment
397.   
398.       for ( ; count > 0; count -= chunk, out += chunk) {
399.           chunk = count;
               ^
400.           if (chunk > drbg->max_request)
401.               chunk = drbg->max_request;

crypto/rand/drbg_lib.c:402:15: Call
400.           if (chunk > drbg->max_request)
401.               chunk = drbg->max_request;
402.           ret = RAND_DRBG_generate(drbg, out, chunk, 0, NULL, 0);
                     ^
403.           if (!ret)
404.               goto err;

crypto/rand/drbg_lib.c:236:1: Parameter `outlen`
  234.    * sent in |adin| and |adinlen|.
  235.    */
  236. > int RAND_DRBG_generate(RAND_DRBG *drbg, unsigned char *out, size_t outlen,
  237.                          int prediction_resistance,
  238.                          const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_lib.c:274:10: Call
  272.       }
  273.   
  274.       if (!ctr_generate(drbg, out, outlen, adin, adinlen)) {
                  ^
  275.           drbg->state = DRBG_ERROR;
  276.           RANDerr(RAND_F_RAND_DRBG_GENERATE, RAND_R_GENERATE_ERROR);

crypto/rand/drbg_rand.c:266:1: <Offset trace>
264.   }
265.   
266. > int ctr_generate(RAND_DRBG *drbg,
267.                    unsigned char *out, size_t outlen,
268.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:266:1: Parameter `outlen`
    264.   }
    265.   
    266. > int ctr_generate(RAND_DRBG *drbg,
    267.                    unsigned char *out, size_t outlen,
    268.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:266:1: <Length trace>
264.   }
265.   
266. > int ctr_generate(RAND_DRBG *drbg,
267.                    unsigned char *out, size_t outlen,
268.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:266:1: Parameter `drbg->ctr.K[*]`
    264.   }
    265.   
    266. > int ctr_generate(RAND_DRBG *drbg,
    267.                    unsigned char *out, size_t outlen,
    268.                    const unsigned char *adin, size_t adinlen)

crypto/rand/drbg_rand.c:288:13: Array access: Offset added: [0, 15] Size: [0, +oo] by call to `RAND_DRBG_generate` 
    286.               /* Use K as temp space as it will be updated */
    287.               AES_encrypt(ctr->V, ctr->K, &ctr->ks);
    288.               memcpy(out, ctr->K, outlen);
                       ^
    289.               break;
    290.           }
