ssl/t1_lib.c:2491: error: BUFFER_OVERRUN_L2
  Offset: [min(-1, `(*s->cert->shared_sigalgs)->sig_idx`), max(7, `(*s->cert->shared_sigalgs)->sig_idx`)] Size: 7.
Showing all 5 steps of the trace


ssl/t1_lib.c:2306:1: <Offset trace>
2304.    * to the server. In this case no error is set.
2305.    */
2306. > int tls_choose_sigalg(SSL *s, int *al)
2307.   {
2308.       int idx = -1;

ssl/t1_lib.c:2306:1: Parameter `(*s->cert->shared_sigalgs)->sig_idx`
2304.    * to the server. In this case no error is set.
2305.    */
2306. > int tls_choose_sigalg(SSL *s, int *al)
2307.   {
2308.       int idx = -1;

ssl/t1_lib.c:2306:1: <Length trace>
2304.    * to the server. In this case no error is set.
2305.    */
2306. > int tls_choose_sigalg(SSL *s, int *al)
2307.   {
2308.       int idx = -1;

ssl/t1_lib.c:2306:1: Parameter `s->cert->pkeys[*]`
2304.    * to the server. In this case no error is set.
2305.    */
2306. > int tls_choose_sigalg(SSL *s, int *al)
2307.   {
2308.       int idx = -1;

ssl/t1_lib.c:2491:5: Array access: Offset: [min(-1, (*s->cert->shared_sigalgs)->sig_idx), max(7, (*s->cert->shared_sigalgs)->sig_idx)] Size: 7
2489.           return 0;
2490.       }
2491.       s->s3->tmp.cert = &s->cert->pkeys[idx];
            ^
2492.       s->cert->key = s->s3->tmp.cert;
2493.       s->s3->tmp.sigalg = lu;
