crypto/bio/b_sock.c:273: error: BUFFER_OVERRUN_L2
  Offset added: [`a->h_name->strlen` + 2, `a->h_name->strlen` + 2] Size: [`a->h_name->strlen` + 1, `a->h_name->strlen` + 1].
Showing all 9 steps of the trace


crypto/bio/b_sock.c:245:1: <Offset trace>
243.   	}
244.   
245. > static struct hostent *ghbn_dup(struct hostent *a)
246.   	{
247.   	struct hostent *ret;

crypto/bio/b_sock.c:245:1: Parameter `a->h_name->strlen`
243.   	}
244.   
245. > static struct hostent *ghbn_dup(struct hostent *a)
246.   	{
247.   	struct hostent *ret;

crypto/bio/b_sock.c:271:2: Assignment
269.   	memset(ret->h_addr_list, 0, i*sizeof(char *));
270.   
271.   	j=strlen(a->h_name)+1;
        ^
272.   	if ((ret->h_name=Malloc(j)) == NULL) goto err;
273.   	memcpy((char *)ret->h_name,a->h_name,j+1);

crypto/bio/b_sock.c:245:1: <Length trace>
243.   	}
244.   
245. > static struct hostent *ghbn_dup(struct hostent *a)
246.   	{
247.   	struct hostent *ret;

crypto/bio/b_sock.c:245:1: Parameter `a->h_name->strlen`
243.   	}
244.   
245. > static struct hostent *ghbn_dup(struct hostent *a)
246.   	{
247.   	struct hostent *ret;

crypto/bio/b_sock.c:271:2: Assignment
269.   	memset(ret->h_addr_list, 0, i*sizeof(char *));
270.   
271.   	j=strlen(a->h_name)+1;
        ^
272.   	if ((ret->h_name=Malloc(j)) == NULL) goto err;
273.   	memcpy((char *)ret->h_name,a->h_name,j+1);

crypto/bio/b_sock.c:272:19: Array declaration
270.   
271.   	j=strlen(a->h_name)+1;
272.   	if ((ret->h_name=Malloc(j)) == NULL) goto err;
                         ^
273.   	memcpy((char *)ret->h_name,a->h_name,j+1);
274.   	for (i=0; a->h_aliases[i] != NULL; i++)

crypto/bio/b_sock.c:272:7: Assignment
270.   
271.   	j=strlen(a->h_name)+1;
272.   	if ((ret->h_name=Malloc(j)) == NULL) goto err;
             ^
273.   	memcpy((char *)ret->h_name,a->h_name,j+1);
274.   	for (i=0; a->h_aliases[i] != NULL; i++)

crypto/bio/b_sock.c:273:2: Array access: Offset added: [a->h_name->strlen + 2, a->h_name->strlen + 2] Size: [a->h_name->strlen + 1, a->h_name->strlen + 1]
271.   	j=strlen(a->h_name)+1;
272.   	if ((ret->h_name=Malloc(j)) == NULL) goto err;
273.   	memcpy((char *)ret->h_name,a->h_name,j+1);
        ^
274.   	for (i=0; a->h_aliases[i] != NULL; i++)
275.   		{
