apps/ts.c:768: error: BUFFER_OVERRUN_L2
  Offset: [0, 1024] Size: 1024 by call to `a2i_ASN1_INTEGER`.
Showing all 7 steps of the trace


apps/ts.c:750:1: Array declaration
748.   }
749.   
750. > static ASN1_INTEGER *next_serial(const char *serialfile)
751.   {
752.       int ret = 0;

apps/ts.c:768:14: Call
766.       } else {
767.           char buf[1024];
768.           if (!a2i_ASN1_INTEGER(in, serial, buf, sizeof(buf))) {
                    ^
769.               BIO_printf(bio_err, "unable to load number from %s\n",
770.                          serialfile);

crypto/asn1/f_int.c:78:14: <Offset trace>
76.           again = (buf[i - 1] == '\\');
77.   
78.           for (j = 0; j < i; j++) {
                   ^
79.               if (!ossl_isxdigit(buf[j]))
80.               {

crypto/asn1/f_int.c:78:14: Assignment
  76.           again = (buf[i - 1] == '\\');
  77.   
  78.           for (j = 0; j < i; j++) {
                     ^
  79.               if (!ossl_isxdigit(buf[j]))
  80.               {

crypto/asn1/f_int.c:54:1: <Length trace>
52.   }
53.   
54. > int a2i_ASN1_INTEGER(BIO *bp, ASN1_INTEGER *bs, char *buf, int size)
55.   {
56.       int i, j, k, m, n, again, bufsize;

crypto/asn1/f_int.c:54:1: Parameter `*buf`
  52.   }
  53.   
  54. > int a2i_ASN1_INTEGER(BIO *bp, ASN1_INTEGER *bs, char *buf, int size)
  55.   {
  56.       int i, j, k, m, n, again, bufsize;

crypto/asn1/f_int.c:85:9: Array access: Offset: [0, 1024] Size: 1024 by call to `a2i_ASN1_INTEGER` 
  83.               }
  84.           }
  85.           buf[i] = '\0';
                ^
  86.           /*
  87.            * We have now cleared all the crap off the end of the line
