test/bntest.c:493: error: BUFFER_OVERRUN_L3
  Offset: [0, 193] Size: [0, 8388607] by call to `BN_GF2m_arr2poly`.
Showing all 9 steps of the trace


test/bntest.c:480:16: Assignment
478.       int i, j, st = 0;
479.       int p0[] = { 163, 7, 6, 3, 0, -1 };
480.       int p1[] = { 193, 15, 0, -1 };
                      ^
481.   
482.       a = BN_new();

test/bntest.c:493:5: Call
491.   
492.       BN_GF2m_arr2poly(p0, b[0]);
493.       BN_GF2m_arr2poly(p1, b[1]);
           ^
494.   
495.       for (i = 0; i < NUM0; i++) {

crypto/bn/bn_gf2m.c:1209:1: Parameter `*p`
  1207.    * bit-string.  The array must be terminated by -1.
  1208.    */
  1209. > int BN_GF2m_arr2poly(const int p[], BIGNUM *a)
  1210.   {
  1211.       int i;

crypto/bn/bn_gf2m.c:1216:13: Call
  1214.       BN_zero(a);
  1215.       for (i = 0; p[i] != -1; i++) {
  1216.           if (BN_set_bit(a, p[i]) == 0)
                      ^
  1217.               return 0;
  1218.       }

crypto/bn/bn_lib.c:692:1: <Offset trace>
690.   }
691.   
692. > int BN_set_bit(BIGNUM *a, int n)
693.   {
694.       int i, j, k;

crypto/bn/bn_lib.c:692:1: Parameter `a->top`
    690.   }
    691.   
    692. > int BN_set_bit(BIGNUM *a, int n)
    693.   {
    694.       int i, j, k;

crypto/bn/bn_lib.c:692:1: <Length trace>
690.   }
691.   
692. > int BN_set_bit(BIGNUM *a, int n)
693.   {
694.       int i, j, k;

crypto/bn/bn_lib.c:692:1: Parameter `*a->d`
    690.   }
    691.   
    692. > int BN_set_bit(BIGNUM *a, int n)
    693.   {
    694.       int i, j, k;

crypto/bn/bn_lib.c:709:5: Array access: Offset: [0, 193] Size: [0, 8388607] by call to `BN_GF2m_arr2poly` 
    707.       }
    708.   
    709.       a->d[i] |= (((BN_ULONG)1) << j);
               ^
    710.       bn_check_top(a);
    711.       return (1);
