ssl/s3_enc.c:347: error: BUFFER_OVERRUN_L2
  Offset added: [min(18446744073709551615, `s->s3->tmp.new_hash->md_size`), max(18446744073709551615, `s->s3->tmp.new_hash->md_size`)] Size: 64.
Showing all 9 steps of the trace


ssl/s3_enc.c:215:1: <Offset trace>
213.   	}
214.   
215. > int ssl3_change_cipher_state(SSL *s, int which)
216.   	{
217.   	unsigned char *p,*key_block,*mac_secret;

ssl/s3_enc.c:215:1: Parameter `s->s3->tmp.new_hash->md_size`
213.   	}
214.   
215. > int ssl3_change_cipher_state(SSL *s, int which)
216.   	{
217.   	unsigned char *p,*key_block,*mac_secret;

ssl/s3_enc.c:315:4: Call
313.   
314.   	p=s->s3->tmp.key_block;
315.   	i=EVP_MD_size(m);
          ^
316.   	cl=EVP_CIPHER_key_length(c);
317.   	j=is_exp ? (cl < SSL_C_EXPORT_KEYLENGTH(s->s3->tmp.new_cipher) ?

crypto/evp/evp_lib.c:260:3: Assignment
  258.   	{
  259.   	if (!md)
  260.   		return -1;
           ^
  261.   	return md->md_size;
  262.   	}

ssl/s3_enc.c:315:2: Assignment
313.   
314.   	p=s->s3->tmp.key_block;
315.   	i=EVP_MD_size(m);
        ^
316.   	cl=EVP_CIPHER_key_length(c);
317.   	j=is_exp ? (cl < SSL_C_EXPORT_KEYLENGTH(s->s3->tmp.new_cipher) ?

ssl/s3_enc.c:215:1: <Length trace>
213.   	}
214.   
215. > int ssl3_change_cipher_state(SSL *s, int which)
216.   	{
217.   	unsigned char *p,*key_block,*mac_secret;

ssl/s3_enc.c:215:1: Parameter `s->s3->read_mac_secret[*]`
213.   	}
214.   
215. > int ssl3_change_cipher_state(SSL *s, int which)
216.   	{
217.   	unsigned char *p,*key_block,*mac_secret;

ssl/s3_enc.c:277:3: Assignment
275.   #endif
276.   		memset(&(s->s3->read_sequence[0]),0,8);
277.   		mac_secret= &(s->s3->read_mac_secret[0]);
         ^
278.   		}
279.   	else

ssl/s3_enc.c:347:2: Array access: Offset added: [min(18446744073709551615, s->s3->tmp.new_hash->md_size), max(18446744073709551615, s->s3->tmp.new_hash->md_size)] Size: 64
345.   
346.   	EVP_MD_CTX_init(&md);
347.   	memcpy(mac_secret,ms,i);
        ^
348.   	if (is_exp)
349.   		{
