apps/s_cb.c:789: error: BUFFER_OVERRUN_L3
  Offset added: 18 (⇐ 2 + 16) Size: [1, 18].
Showing all 10 steps of the trace


apps/s_cb.c:762:5: <Length trace>
760.   
761.       /* Create buffer with peer's address and port */
762.       length = 0;
           ^
763.       switch (peer.sa.sa_family) {
764.       case AF_INET:

apps/s_cb.c:762:5: Assignment
760.   
761.       /* Create buffer with peer's address and port */
762.       length = 0;
           ^
763.       switch (peer.sa.sa_family) {
764.       case AF_INET:

apps/s_cb.c:778:14: Call
776.           break;
777.       }
778.       buffer = app_malloc(length, "cookie generate buffer");
                    ^
779.   
780.       switch (peer.sa.sa_family) {

apps/apps.c:976:1: Parameter `sz`
  974.   }
  975.   
  976. > void* app_malloc(int sz, const char *what)
  977.   {
  978.       void *vp = OPENSSL_malloc(sz);

apps/apps.c:978:16: Call
  976.   void* app_malloc(int sz, const char *what)
  977.   {
  978.       void *vp = OPENSSL_malloc(sz);
                        ^
  979.   
  980.       if (vp == NULL) {

crypto/mem.c:125:9: Assignment
    123.   
    124.       if (num <= 0)
    125.           return NULL;
                   ^
    126.   
    127.       allow_customize = 0;

apps/apps.c:978:5: Assignment
  976.   void* app_malloc(int sz, const char *what)
  977.   {
  978.       void *vp = OPENSSL_malloc(sz);
             ^
  979.   
  980.       if (vp == NULL) {

apps/apps.c:986:5: Assignment
  984.           exit(1);
  985.       }
  986.       return vp;
             ^
  987.   }
  988.   

apps/s_cb.c:778:5: Assignment
776.           break;
777.       }
778.       buffer = app_malloc(length, "cookie generate buffer");
           ^
779.   
780.       switch (peer.sa.sa_family) {

apps/s_cb.c:789:9: Array access: Offset added: 18 (⇐ 2 + 16) Size: [1, 18]
787.       case AF_INET6:
788.           memcpy(buffer, &peer.s6.sin6_port, sizeof(peer.s6.sin6_port));
789.           memcpy(buffer + sizeof(peer.s6.sin6_port),
               ^
790.                  &peer.s6.sin6_addr, sizeof(struct in6_addr));
791.           break;
