test/bntest.c:166: error: BUFFER_OVERRUN_L3
  Offset: [0, 49] Size: [0, 8388607] by call to `BN_set_bit`.
Showing all 7 steps of the trace


test/bntest.c:55:1: Assignment
53.   } MPITEST;
54.   
55. > static const int NUM0 = 100;           /* number of tests */
56.   static const int NUM1 = 50;            /* additional tests for some functions */
57.   static BN_CTX *ctx;

test/bntest.c:166:18: Call
164.               BN_bntest_rand(a, 512, 0, 0);
165.               BN_copy(b, a);
166.               if (!TEST_int_ne(BN_set_bit(a, i), 0))
                        ^
167.                   goto err;
168.               BN_add_word(b, i);

crypto/bn/bn_lib.c:624:1: <Offset trace>
622.   }
623.   
624. > int BN_set_bit(BIGNUM *a, int n)
625.   {
626.       int i, j, k;

crypto/bn/bn_lib.c:624:1: Parameter `a->top`
  622.   }
  623.   
  624. > int BN_set_bit(BIGNUM *a, int n)
  625.   {
  626.       int i, j, k;

crypto/bn/bn_lib.c:624:1: <Length trace>
622.   }
623.   
624. > int BN_set_bit(BIGNUM *a, int n)
625.   {
626.       int i, j, k;

crypto/bn/bn_lib.c:624:1: Parameter `*a->d`
  622.   }
  623.   
  624. > int BN_set_bit(BIGNUM *a, int n)
  625.   {
  626.       int i, j, k;

crypto/bn/bn_lib.c:641:5: Array access: Offset: [0, 49] Size: [0, 8388607] by call to `BN_set_bit` 
  639.       }
  640.   
  641.       a->d[i] |= (((BN_ULONG)1) << j);
             ^
  642.       bn_check_top(a);
  643.       return (1);
