Many method calls made to the ockc library do not defensively protect from overlays. These OCKC apis do not take as input a length for an output buffer. In these cases many APIs do return a length of the output buffer written to. In the event, written length was > allocated buffer, code should be added to OpenJCEPlus to return an error/exception.