crypto/rsa/rsa_eay.c:198: error: BUFFER_OVERRUN_L3
  Offset: 1 Size: [0, +oo] by call to `RSA_padding_add_PKCS1_type_1`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:188:6: Call
186.   
187.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
188.   	num=BN_num_bytes(rsa->n);
            ^
189.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
190.   		{

crypto/bn/bn_lib.c:245:19: Assignment
  243.   	bn_check_top(a);
  244.   
  245.   	if (a->top == 0) return(0);
                           ^
  246.   	l=a->d[a->top-1];
  247.   	i=(a->top-1)*BN_BITS2;

crypto/rsa/rsa_eay.c:188:2: Assignment
186.   
187.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
188.   	num=BN_num_bytes(rsa->n);
        ^
189.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
190.   		{

crypto/rsa/rsa_eay.c:189:28: Array declaration
187.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
188.   	num=BN_num_bytes(rsa->n);
189.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
                                  ^
190.   		{
191.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:189:7: Assignment
187.   	if ((ctx=BN_CTX_new()) == NULL) goto err;
188.   	num=BN_num_bytes(rsa->n);
189.   	if ((buf=(unsigned char *)Malloc(num)) == NULL)
             ^
190.   		{
191.   		RSAerr(RSA_F_RSA_EAY_PRIVATE_ENCRYPT,ERR_R_MALLOC_FAILURE);

crypto/rsa/rsa_eay.c:198:5: Call
196.   		{
197.   	case RSA_PKCS1_PADDING:
198.   		i=RSA_padding_add_PKCS1_type_1(buf,num,from,flen);
           ^
199.   		break;
200.   	case RSA_NO_PADDING:

crypto/rsa/rsa_pk1.c:77:1: <Length trace>
75.   #endif
76.   
77. > int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,
78.   	     unsigned char *from, int flen)
79.   	{

crypto/rsa/rsa_pk1.c:77:1: Parameter `*to`
  75.   #endif
  76.   
  77. > int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,
  78.   	     unsigned char *from, int flen)
  79.   	{

crypto/rsa/rsa_pk1.c:89:2: Assignment
  87.   		}
  88.   	
  89.   	p=(unsigned char *)to;
         ^
  90.   
  91.   	*(p++)=0;

crypto/rsa/rsa_pk1.c:91:4: Assignment
  89.   	p=(unsigned char *)to;
  90.   
  91.   	*(p++)=0;
           ^
  92.   	*(p++)=1; /* Private Key BT (Block Type) */
  93.   

crypto/rsa/rsa_pk1.c:92:2: Array access: Offset: 1 Size: [0, +oo] by call to `RSA_padding_add_PKCS1_type_1` 
  90.   
  91.   	*(p++)=0;
  92.   	*(p++)=1; /* Private Key BT (Block Type) */
         ^
  93.   
  94.   	/* padd out with 0xff data */
