crypto/ct/ct_oct.c:460: error: BUFFER_OVERRUN_L3
  Offset: [1, 3] (⇐ [0, 2] + 1) Size: [1, +oo].
Showing all 4 steps of the trace


crypto/ct/ct_oct.c:436:5: <Length trace>
434.       int len, sct_len, i, is_pp_new = 0;
435.       size_t len2;
436.       unsigned char *p = NULL, *p2;
           ^
437.   
438.       if (pp != NULL) {

crypto/ct/ct_oct.c:436:5: Assignment
434.       int len, sct_len, i, is_pp_new = 0;
435.       size_t len2;
436.       unsigned char *p = NULL, *p2;
           ^
437.   
438.       if (pp != NULL) {

crypto/ct/ct_oct.c:456:13: Assignment
454.       for (i = 0; i < sk_SCT_num(a); i++) {
455.           if (pp != NULL) {
456.               p2 = p;
                   ^
457.               p += 2;
458.               if ((sct_len = i2o_SCT(sk_SCT_value(a, i), &p)) == -1)

crypto/ct/ct_oct.c:460:13: Array access: Offset: [1, 3] (⇐ [0, 2] + 1) Size: [1, +oo]
458.               if ((sct_len = i2o_SCT(sk_SCT_value(a, i), &p)) == -1)
459.                   goto err;
460.               s2n(sct_len, p2);
                   ^
461.           } else {
462.             if ((sct_len = i2o_SCT(sk_SCT_value(a, i), NULL)) == -1)
