apps/ca.c:1618: error: BUFFER_OVERRUN_L3
  Offset: [-1, +oo] Size: [0, +oo] by call to `X509_NAME_add_entry`.
Showing all 9 steps of the trace


apps/ca.c:1522:15: Call
1520.   
1521.   	/* Ok, now we check the 'policy' stuff. */
1522.   	if ((subject=X509_NAME_new()) == NULL)
                      ^
1523.   		{
1524.   		BIO_printf(bio_err,"Malloc failure\n");

crypto/asn1/x_name.c:231:20: Call
  229.   
  230.   	M_ASN1_New_Malloc(ret,X509_NAME);
  231.   	if ((ret->entries=sk_new(NULL)) == NULL)
                            ^
  232.   		{ c.line=__LINE__; goto err2; }
  233.   	M_ASN1_New(ret->bytes,BUF_MEM_new);

crypto/stack/stack.c:130:2: Assignment
    128.   	ret->comp=c;
    129.   	ret->num_alloc=MIN_NODES;
    130.   	ret->num=0;
            ^
    131.   	ret->sorted=0;
    132.   	return(ret);

apps/ca.c:1618:10: Call
1616.   			if (push != NULL)
1617.   				{
1618.   				if (!X509_NAME_add_entry(subject,push,
                 ^
1619.   					X509_NAME_entry_count(subject),0))
1620.   					{

crypto/x509/x509name.c:174:1: <Offset trace>
172.   /* if set is -1, append to previous set, 0 'a new one', and 1,
173.    * prepend to the guy we are about to stomp on. */
174. > int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne, int loc,
175.   	     int set)
176.   	{

crypto/x509/x509name.c:174:1: Parameter `loc`
  172.   /* if set is -1, append to previous set, 0 'a new one', and 1,
  173.    * prepend to the guy we are about to stomp on. */
  174. > int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne, int loc,
  175.   	     int set)
  176.   	{

crypto/x509/x509name.c:174:1: <Length trace>
172.   /* if set is -1, append to previous set, 0 'a new one', and 1,
173.    * prepend to the guy we are about to stomp on. */
174. > int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne, int loc,
175.   	     int set)
176.   	{

crypto/x509/x509name.c:174:1: Parameter `*name->entries->data`
  172.   /* if set is -1, append to previous set, 0 'a new one', and 1,
  173.    * prepend to the guy we are about to stomp on. */
  174. > int X509_NAME_add_entry(X509_NAME *name, X509_NAME_ENTRY *ne, int loc,
  175.   	     int set)
  176.   	{

crypto/x509/x509name.c:198:28: Array access: Offset: [-1, +oo] Size: [0, +oo] by call to `X509_NAME_add_entry` 
  196.   		else
  197.   			{
  198.   			set=((X509_NAME_ENTRY *)sk_value(sk,loc-1))->set;
                                    ^
  199.   			inc=0;
  200.   			}
