test/ectest.c:1484: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, +oo] by call to `EC_GROUP_new_from_ecparameters`.
Showing all 12 steps of the trace


test/ectest.c:1483:12: Call
1481.   
1482.       r = TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_secp112r1))
1483.           && TEST_ptr(ecparameters = EC_GROUP_get_ecparameters(group, NULL))
                   ^
1484.           && TEST_ptr(group2 = EC_GROUP_new_from_ecparameters(ecparameters))
1485.           && TEST_int_eq(EC_GROUP_cmp(group, group2, NULL), 0);

crypto/ec/ec_asn1.c:471:1: Parameter `*params->curve->seed->data`
  469.   }
  470.   
  471. > ECPARAMETERS *EC_GROUP_get_ecparameters(const EC_GROUP *group,
  472.                                                  ECPARAMETERS *params)
  473.   {

test/ectest.c:1484:12: Call
1482.       r = TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_secp112r1))
1483.           && TEST_ptr(ecparameters = EC_GROUP_get_ecparameters(group, NULL))
1484.           && TEST_ptr(group2 = EC_GROUP_new_from_ecparameters(ecparameters))
                   ^
1485.           && TEST_int_eq(EC_GROUP_cmp(group, group2, NULL), 0);
1486.   

crypto/ec/ec_asn1.c:599:1: Parameter `*params->base->data`
  597.   }
  598.   
  599. > EC_GROUP *EC_GROUP_new_from_ecparameters(const ECPARAMETERS *params)
  600.   {
  601.       int ok = 0, tmp;

crypto/ec/ec_asn1.c:784:10: Call
  782.   
  783.       /* extract the ec point */
  784.       if (!EC_POINT_oct2point(ret, point, params->base->data,
                  ^
  785.                               params->base->length, NULL)) {
  786.           ECerr(EC_F_EC_GROUP_NEW_FROM_ECPARAMETERS, ERR_R_EC_LIB);

crypto/ec/ec_oct.c:118:1: Parameter `*buf`
    116.   }
    117.   
    118. > int EC_POINT_oct2point(const EC_GROUP *group, EC_POINT *point,
    119.                          const unsigned char *buf, size_t len, BN_CTX *ctx)
    120.   {

crypto/ec/ec_oct.c:132:20: Call
    130.       if (group->meth->flags & EC_FLAGS_DEFAULT_OCT) {
    131.           if (group->meth->field_type == NID_X9_62_prime_field)
    132.               return ec_GFp_simple_oct2point(group, point, buf, len, ctx);
                              ^
    133.           else
    134.   #ifdef OPENSSL_NO_EC2M

crypto/ec/ecp_oct.c:274:1: Parameter `*buf`
      272.   }
      273.   
      274. > int ec_GFp_simple_oct2point(const EC_GROUP *group, EC_POINT *point,
      275.                               const unsigned char *buf, size_t len, BN_CTX *ctx)
      276.   {

crypto/ec/ecp_oct.c:333:10: Call
      331.           goto err;
      332.   
      333.       if (!BN_bin2bn(buf + 1, field_len, x))
                      ^
      334.           goto err;
      335.       if (BN_ucmp(x, group->field) >= 0) {

crypto/bn/bn_lib.c:407:1: <Length trace>
405.   }
406.   
407. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
408.   {
409.       unsigned int i, m;

crypto/bn/bn_lib.c:407:1: Parameter `*s`
        405.   }
        406.   
        407. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
        408.   {
        409.       unsigned int i, m;

crypto/bn/bn_lib.c:420:24: Array access: Offset: [1, +oo] Size: [0, +oo] by call to `EC_GROUP_new_from_ecparameters` 
        418.       bn_check_top(ret);
        419.       /* Skip leading zero's. */
        420.       for ( ; len > 0 && *s == 0; s++, len--)
                                      ^
        421.           continue;
        422.       n = len;
