test/bntest.c:720: error: BUFFER_OVERRUN_L2
  Offset: [-15, 536870911] (⇐ [0, 1] + [-15, 536870910]) Size: 65 by call to `BN_hex2bn`.
Showing all 7 steps of the trace


test/bntest.c:720:5: Call
718.   
719.       /* Regression test for a BN_sqr overflow bug. */
720.       BN_hex2bn(&a,
           ^
721.                 "80000000000000008000000000000001"
722.                 "FFFFFFFFFFFFFFFE0000000000000000");

crypto/bn/bn_print.c:141:10: <Offset trace>
139.       }
140.   
141.       for (i = 0; i <= (INT_MAX/4) && isxdigit((unsigned char)a[i]); i++)
                ^
142.           continue;
143.   

crypto/bn/bn_print.c:141:10: Assignment
  139.       }
  140.   
  141.       for (i = 0; i <= (INT_MAX/4) && isxdigit((unsigned char)a[i]); i++)
                  ^
  142.           continue;
  143.   

crypto/bn/bn_print.c:164:5: Assignment
  162.           goto err;
  163.   
  164.       j = i;                      /* least significant 'hex' */
             ^
  165.       m = 0;
  166.       h = 0;

crypto/bn/bn_print.c:126:1: <Length trace>
124.   }
125.   
126. > int BN_hex2bn(BIGNUM **bn, const char *a)
127.   {
128.       BIGNUM *ret = NULL;

crypto/bn/bn_print.c:126:1: Parameter `*a`
  124.   }
  125.   
  126. > int BN_hex2bn(BIGNUM **bn, const char *a)
  127.   {
  128.       BIGNUM *ret = NULL;

crypto/bn/bn_print.c:171:17: Array access: Offset: [-15, 536870911] (⇐ [0, 1] + [-15, 536870910]) Size: 65 by call to `BN_hex2bn` 
  169.           l = 0;
  170.           for (;;) {
  171.               c = a[j - m];
                         ^
  172.               k = OPENSSL_hexchar2int(c);
  173.               if (k < 0)
