test/ectest.c:1415: error: BUFFER_OVERRUN_L2
  Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `EC_GROUP_new_from_ecparameters`.
Showing all 10 steps of the trace


test/ectest.c:1415:12: Call
1413.       r = TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_secp112r1))
1414.           && TEST_ptr(ecparameters = EC_GROUP_get_ecparameters(group, NULL))
1415.           && TEST_ptr(group2 = EC_GROUP_new_from_ecparameters(ecparameters))
                   ^
1416.           && TEST_int_eq(EC_GROUP_cmp(group, group2, NULL), 0);
1417.   

crypto/ec/ec_asn1.c:600:1: Parameter `params->fieldID->p.char_two->m`
  598.   }
  599.   
  600. > EC_GROUP *EC_GROUP_new_from_ecparameters(const ECPARAMETERS *params)
  601.   {
  602.       int ok = 0, tmp;

crypto/ec/ec_asn1.c:679:18: Call
  677.               if (!BN_set_bit(p, (int)char_two->m))
  678.                   goto err;
  679.               if (!BN_set_bit(p, (int)tmp_long))
                          ^
  680.                   goto err;
  681.               if (!BN_set_bit(p, 0))

crypto/bn/bn_lib.c:616:1: <Offset trace>
614.   }
615.   
616. > int BN_set_bit(BIGNUM *a, int n)
617.   {
618.       int i, j, k;

crypto/bn/bn_lib.c:616:1: Parameter `a->top`
    614.   }
    615.   
    616. > int BN_set_bit(BIGNUM *a, int n)
    617.   {
    618.       int i, j, k;

crypto/bn/bn_lib.c:616:1: <Length trace>
614.   }
615.   
616. > int BN_set_bit(BIGNUM *a, int n)
617.   {
618.       int i, j, k;

crypto/bn/bn_lib.c:616:1: Parameter `*a->d`
    614.   }
    615.   
    616. > int BN_set_bit(BIGNUM *a, int n)
    617.   {
    618.       int i, j, k;

crypto/bn/bn_lib.c:626:13: Call
    624.       j = n % BN_BITS2;
    625.       if (a->top <= i) {
    626.           if (bn_wexpand(a, i + 1) == NULL)
                       ^
    627.               return 0;
    628.           for (k = a->top; k < i + 1; k++)

crypto/bn/bn_lib.c:940:1: Parameter `*a->d`
      938.   }
      939.   
      940. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
      941.   {
      942.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/bn/bn_lib.c:629:13: Array access: Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `EC_GROUP_new_from_ecparameters` 
    627.               return 0;
    628.           for (k = a->top; k < i + 1; k++)
    629.               a->d[k] = 0;
                       ^
    630.           a->top = i + 1;
    631.       }
