crypto/ec/ecdh_ossl.c:80: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, 8388607] by call to `BN_mul`.
Showing all 11 steps of the trace


crypto/ec/ecdh_ossl.c:79:14: Call
77.   
78.       if (EC_KEY_get_flags(ecdh) & EC_FLAG_COFACTOR_ECDH) {
79.           if (!EC_GROUP_get_cofactor(group, x, NULL) ||
                   ^
80.               !BN_mul(x, x, priv_key, ctx)) {
81.               ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);

crypto/ec/ec_lib.c:342:1: Parameter `cofactor->d`
  340.   }
  341.   
  342. > int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor,
  343.                             BN_CTX *ctx)
  344.   {

crypto/ec/ecdh_ossl.c:80:14: Call
78.       if (EC_KEY_get_flags(ecdh) & EC_FLAG_COFACTOR_ECDH) {
79.           if (!EC_GROUP_get_cofactor(group, x, NULL) ||
80.               !BN_mul(x, x, priv_key, ctx)) {
                   ^
81.               ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);
82.               goto err;

crypto/bn/bn_mul.c:879:13: Assignment
  877.               if (bn_wexpand(rr, 16) == NULL)
  878.                   goto err;
  879.               rr->top = 16;
                     ^
  880.               bn_mul_comba8(rr->d, a->d, b->d);
  881.               goto end;

crypto/bn/bn_mul.c:972:5: Call
  970.    end:
  971.   #endif
  972.       bn_correct_top(rr);
             ^
  973.       if (r != rr && BN_copy(r, rr) == NULL)
  974.           goto err;

crypto/bn/bn_lib.c:1021:1: <Offset trace>
1019.   }
1020.   
1021. > void bn_correct_top(BIGNUM *a)
1022.   {
1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1021:1: Parameter `a->top`
    1019.   }
    1020.   
    1021. > void bn_correct_top(BIGNUM *a)
    1022.   {
    1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1024:5: Assignment
    1022.   {
    1023.       BN_ULONG *ftl;
    1024.       int tmp_top = a->top;
                ^
    1025.   
    1026.       if (tmp_top > 0) {

crypto/bn/bn_lib.c:1021:1: <Length trace>
1019.   }
1020.   
1021. > void bn_correct_top(BIGNUM *a)
1022.   {
1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1021:1: Parameter `*a->d`
    1019.   }
    1020.   
    1021. > void bn_correct_top(BIGNUM *a)
    1022.   {
    1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1027:14: Array access: Offset: [1, +oo] Size: [0, 8388607] by call to `BN_mul` 
    1025.   
    1026.       if (tmp_top > 0) {
    1027.           for (ftl = &(a->d[tmp_top]); tmp_top > 0; tmp_top--) {
                         ^
    1028.               ftl--;
    1029.               if (*ftl != 0)
