test/bntest.c:191: error: BUFFER_OVERRUN_L3
  Offset: [0, 49] Size: [0, 8388607] by call to `BN_set_bit`.
Showing all 7 steps of the trace


test/bntest.c:69:1: Assignment
67.   } MPITEST;
68.   
69. > static const int NUM0 = 100;           /* number of tests */
70.   static const int NUM1 = 50;            /* additional tests for some functions */
71.   static FILE *fp;

test/bntest.c:191:17: Call
189.               BN_bntest_rand(a, 512, 0, 0);
190.               BN_copy(b, a);
191.               if (BN_set_bit(a, i) == 0)
                       ^
192.                   return 0;
193.               BN_add_word(b, i);

crypto/bn/bn_lib.c:692:1: <Offset trace>
690.   }
691.   
692. > int BN_set_bit(BIGNUM *a, int n)
693.   {
694.       int i, j, k;

crypto/bn/bn_lib.c:692:1: Parameter `a->top`
  690.   }
  691.   
  692. > int BN_set_bit(BIGNUM *a, int n)
  693.   {
  694.       int i, j, k;

crypto/bn/bn_lib.c:692:1: <Length trace>
690.   }
691.   
692. > int BN_set_bit(BIGNUM *a, int n)
693.   {
694.       int i, j, k;

crypto/bn/bn_lib.c:692:1: Parameter `*a->d`
  690.   }
  691.   
  692. > int BN_set_bit(BIGNUM *a, int n)
  693.   {
  694.       int i, j, k;

crypto/bn/bn_lib.c:709:5: Array access: Offset: [0, 49] Size: [0, 8388607] by call to `BN_set_bit` 
  707.       }
  708.   
  709.       a->d[i] |= (((BN_ULONG)1) << j);
             ^
  710.       bn_check_top(a);
  711.       return (1);
