ssl/t1_lib.c:1411: error: BUFFER_OVERRUN_L3
  Offset: [3, 5] (⇐ [2, 4] + 1) Size: [1, +oo].
Showing all 5 steps of the trace


ssl/t1_lib.c:1303:13: <Length trace>
1301.               s->session->tlsext_ticklen = ticklen;
1302.           } else
1303.               ticklen = 0;
                    ^
1304.           if (ticklen == 0 && s->tlsext_session_ticket &&
1305.               s->tlsext_session_ticket->data == NULL)

ssl/t1_lib.c:1303:13: Assignment
1301.               s->session->tlsext_ticklen = ticklen;
1302.           } else
1303.               ticklen = 0;
                    ^
1304.           if (ticklen == 0 && s->tlsext_session_ticket &&
1305.               s->tlsext_session_ticket->data == NULL)

ssl/t1_lib.c:1317:13: Assignment
1315.           if (ticklen) {
1316.               memcpy(ret, s->session->tlsext_tick, ticklen);
1317.               ret += ticklen;
                    ^
1318.           }
1319.       }

ssl/t1_lib.c:1410:9: Assignment
1408.           if (limit - ret - 4 < 0)
1409.               return NULL;
1410.           s2n(TLSEXT_TYPE_next_proto_neg, ret);
                ^
1411.           s2n(0, ret);
1412.       }

ssl/t1_lib.c:1411:9: Array access: Offset: [3, 5] (⇐ [2, 4] + 1) Size: [1, +oo]
1409.               return NULL;
1410.           s2n(TLSEXT_TYPE_next_proto_neg, ret);
1411.           s2n(0, ret);
                ^
1412.       }
1413.   #endif
