crypto/evp/e_aes.c:1739: error: BUFFER_OVERRUN_L3
  Offset added: 16 Size: [0, +oo] by call to `CRYPTO_gcm128_tag`.
Showing all 6 steps of the trace


crypto/evp/e_aes.c:1739:9: Call
1737.               return 0;
1738.           }
1739.           CRYPTO_gcm128_tag(&gctx->gcm, EVP_CIPHER_CTX_buf_noconst(ctx), 16);
                ^
1740.           gctx->taglen = 16;
1741.           /* Don't reuse the IV */

crypto/modes/gcm128.c:1650:12: <Offset trace>
1648.       CRYPTO_gcm128_finish(ctx, NULL, 0);
1649.       memcpy(tag, ctx->Xi.c,
1650.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
                   ^
1651.   }
1652.   

crypto/modes/gcm128.c:1650:12: Assignment
  1648.       CRYPTO_gcm128_finish(ctx, NULL, 0);
  1649.       memcpy(tag, ctx->Xi.c,
  1650.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
                     ^
  1651.   }
  1652.   

crypto/modes/gcm128.c:1646:1: <Length trace>
1644.   }
1645.   
1646. > void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
1647.   {
1648.       CRYPTO_gcm128_finish(ctx, NULL, 0);

crypto/modes/gcm128.c:1646:1: Parameter `ctx->Xi.c[*]`
  1644.   }
  1645.   
  1646. > void CRYPTO_gcm128_tag(GCM128_CONTEXT *ctx, unsigned char *tag, size_t len)
  1647.   {
  1648.       CRYPTO_gcm128_finish(ctx, NULL, 0);

crypto/modes/gcm128.c:1649:5: Array access: Offset added: 16 Size: [0, +oo] by call to `CRYPTO_gcm128_tag` 
  1647.   {
  1648.       CRYPTO_gcm128_finish(ctx, NULL, 0);
  1649.       memcpy(tag, ctx->Xi.c,
              ^
  1650.              len <= sizeof(ctx->Xi.c) ? len : sizeof(ctx->Xi.c));
  1651.   }
