apps/s_client.c:1564: error: BUFFER_OVERRUN_L3
  Offset added: [48, +oo] (⇐ [0, +oo] + 48) Size: [1, +oo] by call to `SSL_CTX_add_client_custom_ext`.
Showing all 11 steps of the trace


apps/s_client.c:1564:14: Call
1562.   
1563.       for (i = 0; i < serverinfo_count; i++) {
1564.           if (!SSL_CTX_add_client_custom_ext(ctx,
                     ^
1565.                                              serverinfo_types[i],
1566.                                              NULL, NULL, NULL,

ssl/t1_ext.c:213:1: Parameter `ctx->cert->cli_ext.meths_count`
  211.   
  212.   /* Application level functions to add custom extension callbacks */
  213. > int SSL_CTX_add_client_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
  214.                                     custom_ext_add_cb add_cb,
  215.                                     custom_ext_free_cb free_cb,

apps/s_client.c:1564:14: Call
1562.   
1563.       for (i = 0; i < serverinfo_count; i++) {
1564.           if (!SSL_CTX_add_client_custom_ext(ctx,
                     ^
1565.                                              serverinfo_types[i],
1566.                                              NULL, NULL, NULL,

ssl/t1_ext.c:213:1: Parameter `ctx->cert->cli_ext.meths_count`
  211.   
  212.   /* Application level functions to add custom extension callbacks */
  213. > int SSL_CTX_add_client_custom_ext(SSL_CTX *ctx, unsigned int ext_type,
  214.                                     custom_ext_add_cb add_cb,
  215.                                     custom_ext_free_cb free_cb,

ssl/t1_ext.c:230:12: Call
  228.           return 0;
  229.   #endif
  230.       return custom_ext_meth_add(&ctx->cert->cli_ext, ext_type, add_cb,
                    ^
  231.                                  free_cb, add_arg, parse_cb, parse_arg);
  232.   }

ssl/t1_ext.c:156:1: <Length trace>
154.   
155.   /* Set callbacks for a custom extension. */
156. > static int custom_ext_meth_add(custom_ext_methods *exts,
157.                                  unsigned int ext_type,
158.                                  custom_ext_add_cb add_cb,

ssl/t1_ext.c:156:1: Parameter `exts->meths_count`
    154.   
    155.   /* Set callbacks for a custom extension. */
    156. > static int custom_ext_meth_add(custom_ext_methods *exts,
    157.                                  unsigned int ext_type,
    158.                                  custom_ext_add_cb add_cb,

ssl/t1_ext.c:181:9: Call
    179.           return 0;
    180.       /* Search for duplicate */
    181.       if (custom_ext_find(exts, ext_type))
                   ^
    182.           return 0;
    183.       tmp = OPENSSL_realloc(exts->meths,

ssl/t1_ext.c:17:1: Parameter `exts->meths_count`
      15.   
      16.   /* Find a custom extension from the list. */
      17. > static custom_ext_method *custom_ext_find(const custom_ext_methods *exts,
      18.                                             unsigned int ext_type)
      19.   {

ssl/t1_ext.c:194:5: Assignment
    192.   
    193.       exts->meths = tmp;
    194.       meth = exts->meths + exts->meths_count;
               ^
    195.       memset(meth, 0, sizeof(*meth));
    196.       meth->parse_cb = parse_cb;

ssl/t1_ext.c:195:5: Array access: Offset added: [48, +oo] (⇐ [0, +oo] + 48) Size: [1, +oo] by call to `SSL_CTX_add_client_custom_ext` 
    193.       exts->meths = tmp;
    194.       meth = exts->meths + exts->meths_count;
    195.       memset(meth, 0, sizeof(*meth));
               ^
    196.       meth->parse_cb = parse_cb;
    197.       meth->add_cb = add_cb;
