crypto/evp/e_aes.c:1918: error: BUFFER_OVERRUN_S2
  Offset added: [max(4, `arg`), min(16, `arg`)] Size: [0, +oo].
Showing all 5 steps of the trace


crypto/evp/e_aes.c:1862:1: <Offset trace>
1860.       BLOCK_CIPHER_custom(NID_aes, 256, 1, 16, xts, XTS, XTS_FLAGS)
1861.   
1862. > static int aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
1863.   {
1864.       EVP_AES_CCM_CTX *cctx = c->cipher_data;

crypto/evp/e_aes.c:1862:1: Parameter `arg`
1860.       BLOCK_CIPHER_custom(NID_aes, 256, 1, 16, xts, XTS, XTS_FLAGS)
1861.   
1862. > static int aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
1863.   {
1864.       EVP_AES_CCM_CTX *cctx = c->cipher_data;

crypto/evp/e_aes.c:1862:1: <Length trace>
1860.       BLOCK_CIPHER_custom(NID_aes, 256, 1, 16, xts, XTS, XTS_FLAGS)
1861.   
1862. > static int aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
1863.   {
1864.       EVP_AES_CCM_CTX *cctx = c->cipher_data;

crypto/evp/e_aes.c:1862:1: Parameter `c->buf[*]`
1860.       BLOCK_CIPHER_custom(NID_aes, 256, 1, 16, xts, XTS, XTS_FLAGS)
1861.   
1862. > static int aes_ccm_ctrl(EVP_CIPHER_CTX *c, int type, int arg, void *ptr)
1863.   {
1864.       EVP_AES_CCM_CTX *cctx = c->cipher_data;

crypto/evp/e_aes.c:1918:13: Array access: Offset added: [max(4, arg), min(16, arg)] Size: [0, +oo]
1916.           if (ptr) {
1917.               cctx->tag_set = 1;
1918.               memcpy(c->buf, ptr, arg);
                    ^
1919.           }
1920.           cctx->M = arg;
