test/ectest.c:1825: error: BUFFER_OVERRUN_L2
  Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `EC_GROUP_new_from_ecparameters`.
Showing all 10 steps of the trace


test/ectest.c:1825:13: Call
1823.       if (!TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_secp224r1))
1824.           || !TEST_ptr(ecparameters = EC_GROUP_get_ecparameters(group, NULL))
1825.           || !TEST_ptr(group2 = EC_GROUP_new_from_ecparameters(ecparameters))
                    ^
1826.           || !TEST_int_eq(EC_GROUP_cmp(group, group2, NULL), 0))
1827.           goto err;

crypto/ec/ec_asn1.c:568:1: Parameter `params->fieldID->p.char_two->m`
  566.   }
  567.   
  568. > EC_GROUP *EC_GROUP_new_from_ecparameters(const ECPARAMETERS *params)
  569.   {
  570.       int ok = 0, tmp;

crypto/ec/ec_asn1.c:652:18: Call
  650.               if (!BN_set_bit(p, (int)char_two->m))
  651.                   goto err;
  652.               if (!BN_set_bit(p, (int)tmp_long))
                          ^
  653.                   goto err;
  654.               if (!BN_set_bit(p, 0))

crypto/bn/bn_lib.c:628:1: <Offset trace>
626.   }
627.   
628. > int BN_set_bit(BIGNUM *a, int n)
629.   {
630.       int i, j, k;

crypto/bn/bn_lib.c:628:1: Parameter `a->top`
    626.   }
    627.   
    628. > int BN_set_bit(BIGNUM *a, int n)
    629.   {
    630.       int i, j, k;

crypto/bn/bn_lib.c:628:1: <Length trace>
626.   }
627.   
628. > int BN_set_bit(BIGNUM *a, int n)
629.   {
630.       int i, j, k;

crypto/bn/bn_lib.c:628:1: Parameter `*a->d`
    626.   }
    627.   
    628. > int BN_set_bit(BIGNUM *a, int n)
    629.   {
    630.       int i, j, k;

crypto/bn/bn_lib.c:638:13: Call
    636.       j = n % BN_BITS2;
    637.       if (a->top <= i) {
    638.           if (bn_wexpand(a, i + 1) == NULL)
                       ^
    639.               return 0;
    640.           for (k = a->top; k < i + 1; k++)

crypto/bn/bn_lib.c:962:1: Parameter `*a->d`
      960.   }
      961.   
      962. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
      963.   {
      964.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/bn/bn_lib.c:641:13: Array access: Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `EC_GROUP_new_from_ecparameters` 
    639.               return 0;
    640.           for (k = a->top; k < i + 1; k++)
    641.               a->d[k] = 0;
                       ^
    642.           a->top = i + 1;
    643.           a->flags &= ~BN_FLG_FIXED_TOP;
