ssl/statem/extensions_clnt.c:512: error: BUFFER_OVERRUN_L3
  Offset: [-1, +oo] Size: 29 by call to `tls_curve_allowed`.
Showing all 7 steps of the trace


ssl/statem/extensions_clnt.c:481:1: Parameter `*s->session->tlsext_supportedgroupslist`
479.   
480.   
481. > int tls_construct_ctos_key_share(SSL *s, WPACKET *pkt, int *al)
482.   {
483.       size_t i, sharessent = 0, num_curves = 0;

ssl/statem/extensions_clnt.c:512:14: Call
510.           size_t encodedlen;
511.   
512.           if (!tls_curve_allowed(s, pcurves, SSL_SECOP_CURVE_SUPPORTED))
                    ^
513.               continue;
514.   

ssl/t1_lib.c:309:1: <Offset trace>
307.   
308.   /* See if curve is allowed by security callback */
309. > int tls_curve_allowed(SSL *s, const unsigned char *curve, int op)
310.   {
311.       const tls_curve_info *cinfo;

ssl/t1_lib.c:309:1: Parameter `*curve`
  307.   
  308.   /* See if curve is allowed by security callback */
  309. > int tls_curve_allowed(SSL *s, const unsigned char *curve, int op)
  310.   {
  311.       const tls_curve_info *cinfo;

ssl/t1_lib.c:141:1: <Length trace>
139.    * table: the index of each entry is one less than the TLS curve id.
140.    */
141. > static const tls_curve_info nid_list[] = {
142.       {NID_sect163k1, 80, TLS_CURVE_CHAR2}, /* sect163k1 (1) */
143.       {NID_sect163r1, 80, TLS_CURVE_CHAR2}, /* sect163r1 (2) */

ssl/t1_lib.c:141:1: Array declaration
  139.    * table: the index of each entry is one less than the TLS curve id.
  140.    */
  141. > static const tls_curve_info nid_list[] = {
  142.       {NID_sect163k1, 80, TLS_CURVE_CHAR2}, /* sect163k1 (1) */
  143.       {NID_sect163r1, 80, TLS_CURVE_CHAR2}, /* sect163r1 (2) */

ssl/t1_lib.c:316:5: Array access: Offset: [-1, +oo] Size: 29 by call to `tls_curve_allowed` 
  314.       if ((curve[1] < 1) || ((size_t)curve[1] > OSSL_NELEM(nid_list)))
  315.           return 0;
  316.       cinfo = &nid_list[curve[1] - 1];
             ^
  317.   # ifdef OPENSSL_NO_EC2M
  318.       if (cinfo->flags & TLS_CURVE_CHAR2)
