apps/pkcs8.c:245: error: BUFFER_OVERRUN_L2
  Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string`.
Showing all 11 steps of the trace


apps/pkcs8.c:70:1: Array declaration
68.   
69.   
70. > int MAIN(int argc, char **argv)
71.   {
72.   	char **args, *infile = NULL, *outfile = NULL;

apps/pkcs8.c:245:5: Call
243.   			if(!passout) {
244.   				passout = pass;
245.   				EVP_read_pw_string(pass, 50, "Enter Encryption Password:", 1);
           ^
246.   			}
247.   			if (!(p8 = PKCS8_encrypt(pbe_nid, cipher,

crypto/evp/evp_key.c:88:1: Parameter `len`
  86.   #endif
  87.   
  88. > int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
  89.   	{
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))

crypto/evp/evp_key.c:92:9: Call
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))
  91.   		prompt=prompt_string;
  92.   	return(des_read_pw_string(buf,len,prompt,verify));
                ^
  93.   	}
  94.   

crypto/des/read_pwd.c:208:1: Parameter `*buf`
    206.   static jmp_buf save;
    207.   
    208. > int des_read_pw_string(char *buf, int length, const char *prompt,
    209.   	     int verify)
    210.   	{

crypto/des/read_pwd.c:214:6: Call
    212.   	int ret;
    213.   
    214.   	ret=des_read_pw(buf,buff,(length>BUFSIZ)?BUFSIZ:length,prompt,verify);
                ^
    215.   	memset(buff,0,BUFSIZ);
    216.   	return(ret);

crypto/des/read_pwd.c:233:1: <Offset trace>
231.   
232.   /* return 0 if ok, 1 (or -1) otherwise */
233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
234.   	     int verify)
235.   	{

crypto/des/read_pwd.c:233:1: Parameter `size`
      231.   
      232.   /* return 0 if ok, 1 (or -1) otherwise */
      233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      234.   	     int verify)
      235.   	{

crypto/des/read_pwd.c:233:1: <Length trace>
231.   
232.   /* return 0 if ok, 1 (or -1) otherwise */
233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
234.   	     int verify)
235.   	{

crypto/des/read_pwd.c:233:1: Parameter `*buf`
      231.   
      232.   /* return 0 if ok, 1 (or -1) otherwise */
      233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      234.   	     int verify)
      235.   	{

crypto/des/read_pwd.c:331:3: Array access: Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string` 
      329.   
      330.   		buf[0]='\0';
      331.   		fgets(buf,size,tty);
               ^
      332.   		if (feof(tty)) goto error;
      333.   		if (ferror(tty)) goto error;
