crypto/x509v3/v3_bcons.c:100: error: BUFFER_OVERRUN_L2
  Offset added: [0, 2147483646] Size: 64 by call to `X509V3_add_value_int`.
Showing all 15 steps of the trace


crypto/x509v3/v3_bcons.c:100:5: Call
98.   {
99.       X509V3_add_value_bool("CA", bcons->ca, &extlist);
100.       X509V3_add_value_int("pathlen", bcons->pathlen, &extlist);
           ^
101.       return extlist;
102.   }

crypto/x509v3/v3_utl.c:226:1: Parameter `*name`
  224.   }
  225.   
  226. > int X509V3_add_value_int(const char *name, ASN1_INTEGER *aint,
  227.                            STACK_OF(CONF_VALUE) **extlist)
  228.   {

crypto/x509v3/v3_utl.c:236:11: Call
  234.       if ((strtmp = i2s_ASN1_INTEGER(NULL, aint)) == NULL)
  235.           return 0;
  236.       ret = X509V3_add_value(name, strtmp, extlist);
                   ^
  237.       OPENSSL_free(strtmp);
  238.       return ret;

crypto/x509v3/v3_utl.c:83:1: Parameter `*name`
    81.   /* Add a CONF_VALUE name value pair to stack */
    82.   
    83. > int X509V3_add_value(const char *name, const char *value,
    84.                        STACK_OF(CONF_VALUE) **extlist)
    85.   {

crypto/x509v3/v3_utl.c:89:26: Call
    87.       char *tname = NULL, *tvalue = NULL;
    88.   
    89.       if (name && (tname = BUF_strdup(name)) == NULL)
                                   ^
    90.           goto err;
    91.       if (value && (tvalue = BUF_strdup(value)) == NULL)

crypto/buffer/buf_str.c:73:1: Parameter `*str`
      71.   }
      72.   
      73. > char *BUF_strdup(const char *str)
      74.   {
      75.       if (str == NULL)

crypto/buffer/buf_str.c:77:12: Call
      75.       if (str == NULL)
      76.           return NULL;
      77.       return BUF_strndup(str, strlen(str));
                       ^
      78.   }
      79.   

crypto/buffer/buf_str.c:87:11: <Offset trace>
85.           return NULL;
86.   
87.       siz = BUF_strnlen(str, siz);
                ^
88.   
89.       if (siz >= INT_MAX)

crypto/buffer/buf_str.c:87:11: Call
        85.           return NULL;
        86.   
        87.       siz = BUF_strnlen(str, siz);
                        ^
        88.   
        89.       if (siz >= INT_MAX)

crypto/buffer/buf_str.c:64:1: Parameter `*str`
          62.   #include <openssl/buffer.h>
          63.   
          64. > size_t BUF_strnlen(const char *str, size_t maxlen)
          65.   {
          66.       const char *p;

crypto/buffer/buf_str.c:70:5: Assignment
          68.       for (p = str; maxlen-- != 0 && *p != '\0'; ++p) ;
          69.   
          70.       return p - str;
                    ^
          71.   }
          72.   

crypto/buffer/buf_str.c:87:5: Assignment
        85.           return NULL;
        86.   
        87.       siz = BUF_strnlen(str, siz);
                  ^
        88.   
        89.       if (siz >= INT_MAX)

crypto/buffer/buf_str.c:80:1: <Length trace>
78.   }
79.   
80. > char *BUF_strndup(const char *str, size_t siz)
81.   {
82.       char *ret;

crypto/buffer/buf_str.c:80:1: Parameter `*str`
        78.   }
        79.   
        80. > char *BUF_strndup(const char *str, size_t siz)
        81.   {
        82.       char *ret;

crypto/buffer/buf_str.c:98:5: Array access: Offset added: [0, 2147483646] Size: 64 by call to `X509V3_add_value_int` 
        96.       }
        97.   
        98.       memcpy(ret, str, siz);
                   ^
        99.       ret[siz] = '\0';
        100.   
