apps/x509.c:770: error: BUFFER_OVERRUN_S2
  Offset: `serialfile->strlen` Size: [0, +oo].
Showing all 8 steps of the trace


apps/x509.c:735:1: <Offset trace>
733.   	}
734.   
735. > static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
736.   	     X509 *x, X509 *xca, EVP_PKEY *pkey, char *serialfile, int create,
737.   	     int days, LHASH *conf, char *section)

apps/x509.c:735:1: Parameter `serialfile->strlen`
733.   	}
734.   
735. > static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
736.   	     X509 *x, X509 *xca, EVP_PKEY *pkey, char *serialfile, int create,
737.   	     int days, LHASH *conf, char *section)

apps/x509.c:753:21: <Length trace>
751.   
752.   	X509_STORE_CTX_init(&xsc,ctx,x,NULL);
753.   	buf=(char *)Malloc(EVP_PKEY_size(pkey)*2+
                           ^
754.   		((serialfile == NULL)
755.   			?(strlen(CAfile)+strlen(POSTFIX)+1)

apps/x509.c:753:21: Call
751.   
752.   	X509_STORE_CTX_init(&xsc,ctx,x,NULL);
753.   	buf=(char *)Malloc(EVP_PKEY_size(pkey)*2+
                           ^
754.   		((serialfile == NULL)
755.   			?(strlen(CAfile)+strlen(POSTFIX)+1)

crypto/evp/p_lib.c:84:3: Assignment
  82.   	{
  83.   	if (pkey == NULL)
  84.   		return(0);
          ^
  85.   #ifndef NO_RSA
  86.   	if (pkey->type == EVP_PKEY_RSA)

apps/x509.c:753:14: Array declaration
751.   
752.   	X509_STORE_CTX_init(&xsc,ctx,x,NULL);
753.   	buf=(char *)Malloc(EVP_PKEY_size(pkey)*2+
                    ^
754.   		((serialfile == NULL)
755.   			?(strlen(CAfile)+strlen(POSTFIX)+1)

apps/x509.c:753:2: Assignment
751.   
752.   	X509_STORE_CTX_init(&xsc,ctx,x,NULL);
753.   	buf=(char *)Malloc(EVP_PKEY_size(pkey)*2+
        ^
754.   		((serialfile == NULL)
755.   			?(strlen(CAfile)+strlen(POSTFIX)+1)

apps/x509.c:770:3: Array access: Offset: serialfile->strlen Size: [0, +oo]
768.   		}
769.   	else
770.   		strcpy(buf,serialfile);
         ^
771.   	serial=BN_new();
772.   	bs=ASN1_INTEGER_new();
