apps/pkcs12.c:314: error: BUFFER_OVERRUN_L2
  Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string`.
Showing all 11 steps of the trace


apps/pkcs12.c:90:1: Array declaration
88.   int alg_print(BIO *x, X509_ALGOR *alg);
89.   int cert_load(BIO *in, STACK_OF(X509) *sk);
90. > int MAIN(int argc, char **argv)
91.   {
92.       char *infile=NULL, *outfile=NULL, *keyname = NULL;	

apps/pkcs12.c:314:5: Call
312.       CRYPTO_push_info("read MAC password");
313.   #endif
314.   	if(EVP_read_pw_string (macpass, 50, "Enter MAC Password:", export_cert))
           ^
315.   	{
316.       	    BIO_printf (bio_err, "Can't read Password\n");

crypto/evp/evp_key.c:87:1: Parameter `len`
  85.    * in the DES library -- if someone ever wants to disable DES,
  86.    * this function will fail */
  87. > int EVP_read_pw_string(char *buf, int len, const char *prompt, int verify)
  88.   	{
  89.   #ifndef NO_DES

crypto/evp/evp_key.c:92:9: Call
  90.   	if ((prompt == NULL) && (prompt_string[0] != '\0'))
  91.   		prompt=prompt_string;
  92.   	return(des_read_pw_string(buf,len,prompt,verify));
                ^
  93.   #else
  94.   	return -1;

crypto/des/read_pwd.c:208:1: Parameter `*buf`
    206.   static jmp_buf save;
    207.   
    208. > int des_read_pw_string(char *buf, int length, const char *prompt,
    209.   	     int verify)
    210.   	{

crypto/des/read_pwd.c:214:6: Call
    212.   	int ret;
    213.   
    214.   	ret=des_read_pw(buf,buff,(length>BUFSIZ)?BUFSIZ:length,prompt,verify);
                ^
    215.   	memset(buff,0,BUFSIZ);
    216.   	return(ret);

crypto/des/read_pwd.c:233:1: <Offset trace>
231.   
232.   /* return 0 if ok, 1 (or -1) otherwise */
233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
234.   	     int verify)
235.   	{

crypto/des/read_pwd.c:233:1: Parameter `size`
      231.   
      232.   /* return 0 if ok, 1 (or -1) otherwise */
      233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      234.   	     int verify)
      235.   	{

crypto/des/read_pwd.c:233:1: <Length trace>
231.   
232.   /* return 0 if ok, 1 (or -1) otherwise */
233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
234.   	     int verify)
235.   	{

crypto/des/read_pwd.c:233:1: Parameter `*buf`
      231.   
      232.   /* return 0 if ok, 1 (or -1) otherwise */
      233. > int des_read_pw(char *buf, char *buff, int size, const char *prompt,
      234.   	     int verify)
      235.   	{

crypto/des/read_pwd.c:331:3: Array access: Offset added: [50, 8192] Size: 400 by call to `EVP_read_pw_string` 
      329.   
      330.   		buf[0]='\0';
      331.   		fgets(buf,size,tty);
               ^
      332.   		if (feof(tty)) goto error;
      333.   		if (ferror(tty)) goto error;
