crypto/camellia/cmll_cfb.c:218: error: BUFFER_OVERRUN_L2
  Offset: [0, 15] Size: 1 by call to `Camellia_cfbr_encrypt_block`.
Showing all 7 steps of the trace


crypto/camellia/cmll_cfb.c:204:1: Array declaration
202.   
203.   /* N.B. This expects the input to be packed, MS bit first */
204. > void Camellia_cfb1_encrypt(const unsigned char *in, unsigned char *out,
205.   	const unsigned long length, const CAMELLIA_KEY *key,
206.   	unsigned char *ivec, int *num, const int enc)

crypto/camellia/cmll_cfb.c:218:3: Call
216.   		{
217.   		c[0]=(in[n/8]&(1 << (7-n%8))) ? 0x80 : 0;
218.   		Camellia_cfbr_encrypt_block(c,d,1,key,ivec,enc);
         ^
219.   		out[n/8]=(out[n/8]&~(1 << (7-n%8)))|((d[0]&0x80) >> (n%8));
220.   		}

crypto/camellia/cmll_cfb.c:186:7: <Offset trace>
184.   	num = (nbits+7)/8;
185.   	if (enc)	/* encrypt the input */
186.   		for(n=0 ; n < num ; ++n)
             ^
187.   			out[n] = (ovec[CAMELLIA_BLOCK_SIZE+n] = in[n] ^ ivec[n]);
188.   	else		/* decrypt the input */

crypto/camellia/cmll_cfb.c:186:7: Assignment
  184.   	num = (nbits+7)/8;
  185.   	if (enc)	/* encrypt the input */
  186.   		for(n=0 ; n < num ; ++n)
               ^
  187.   			out[n] = (ovec[CAMELLIA_BLOCK_SIZE+n] = in[n] ^ ivec[n]);
  188.   	else		/* decrypt the input */

crypto/camellia/cmll_cfb.c:171:1: <Length trace>
169.   /* This expects a single block of size nbits for both in and out. Note that
170.      it corrupts any extra bits in the last byte of out */
171. > void Camellia_cfbr_encrypt_block(const unsigned char *in,unsigned char *out,
172.   	const int nbits,const CAMELLIA_KEY *key,
173.   	unsigned char *ivec,const int enc)

crypto/camellia/cmll_cfb.c:171:1: Parameter `*out`
  169.   /* This expects a single block of size nbits for both in and out. Note that
  170.      it corrupts any extra bits in the last byte of out */
  171. > void Camellia_cfbr_encrypt_block(const unsigned char *in,unsigned char *out,
  172.   	const int nbits,const CAMELLIA_KEY *key,
  173.   	unsigned char *ivec,const int enc)

crypto/camellia/cmll_cfb.c:187:4: Array access: Offset: [0, 15] Size: 1 by call to `Camellia_cfbr_encrypt_block` 
  185.   	if (enc)	/* encrypt the input */
  186.   		for(n=0 ; n < num ; ++n)
  187.   			out[n] = (ovec[CAMELLIA_BLOCK_SIZE+n] = in[n] ^ ivec[n]);
            ^
  188.   	else		/* decrypt the input */
  189.   		for(n=0 ; n < num ; ++n)
