crypto/ec/ec2_mult.c:290: error: BUFFER_OVERRUN_L3
  Offset: 9 Size: [0, 8388607] by call to `BN_consttime_swap`.
Showing all 6 steps of the trace


crypto/ec/ec2_mult.c:292:18: Call
290.               BN_consttime_swap(word & mask, x1, x2, group_top);
291.               BN_consttime_swap(word & mask, z1, z2, group_top);
292.               if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx))
                        ^
293.                   goto err;
294.               if (!gf2m_Mdouble(group, x1, z1, ctx))

crypto/ec/ec2_mult.c:81:1: Parameter `x1->d`
  79.    *     GF(2^m) without precomputation" (CHES '99, LNCS 1717).
  80.    */
  81. > static int gf2m_Madd(const EC_GROUP *group, const BIGNUM *x, BIGNUM *x1,
  82.                        BIGNUM *z1, const BIGNUM *x2, const BIGNUM *z2,
  83.                        BN_CTX *ctx)

crypto/ec/ec2_mult.c:290:13: Call
288.           word = bn_get_words(scalar)[i];
289.           while (mask) {
290.               BN_consttime_swap(word & mask, x1, x2, group_top);
                   ^
291.               BN_consttime_swap(word & mask, z1, z2, group_top);
292.               if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx))

crypto/bn/bn_lib.c:830:1: <Length trace>
828.    * a and b cannot be the same number
829.    */
830. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
831.   {
832.       BN_ULONG t;

crypto/bn/bn_lib.c:830:1: Parameter `*b->d`
  828.    * a and b cannot be the same number
  829.    */
  830. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  831.   {
  832.       BN_ULONG t;

crypto/bn/bn_lib.c:861:9: Array access: Offset: 9 Size: [0, 8388607] by call to `BN_consttime_swap` 
  859.           /* Fallthrough */
  860.       case 10:
  861.           BN_CONSTTIME_SWAP(9);   /* Fallthrough */
                 ^
  862.       case 9:
  863.           BN_CONSTTIME_SWAP(8);   /* Fallthrough */
