test/ecstresstest.c:53: error: BUFFER_OVERRUN_L3
  Offset: [10, +oo] Size: [0, 8388607] by call to `EC_POINT_mul`.
Showing all 18 steps of the trace


test/ecstresstest.c:53:14: Call
51.   
52.       for (i = 0; i < num; i++) {
53.           if (!TEST_true(EC_POINT_mul(group, point, NULL, point, scalar, NULL))
                   ^
54.                   || !TEST_true(EC_POINT_get_affine_coordinates(group, point,
55.                                                                 scalar,

crypto/ec/ec_lib.c:958:12: Call
  956.       scalars[0] = p_scalar;
  957.   
  958.       return EC_POINTs_mul(group, r, g_scalar,
                    ^
  959.                            (point != NULL
  960.                             && p_scalar != NULL), points, scalars, ctx);

crypto/ec/ec_lib.c:909:1: Parameter `r->Z->top`
    907.    */
    908.   
    909. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    910.                     size_t num, const EC_POINT *points[],
    911.                     const BIGNUM *scalars[], BN_CTX *ctx)

test/ecstresstest.c:53:14: Call
51.   
52.       for (i = 0; i < num; i++) {
53.           if (!TEST_true(EC_POINT_mul(group, point, NULL, point, scalar, NULL))
                   ^
54.                   || !TEST_true(EC_POINT_get_affine_coordinates(group, point,
55.                                                                 scalar,

crypto/ec/ec_lib.c:947:1: Parameter `group->field->top`
  945.   }
  946.   
  947. > int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *g_scalar,
  948.                    const EC_POINT *point, const BIGNUM *p_scalar, BN_CTX *ctx)
  949.   {

crypto/ec/ec_lib.c:958:12: Call
  956.       scalars[0] = p_scalar;
  957.   
  958.       return EC_POINTs_mul(group, r, g_scalar,
                    ^
  959.                            (point != NULL
  960.                             && p_scalar != NULL), points, scalars, ctx);

crypto/ec/ec_lib.c:909:1: Parameter `group->field->top`
    907.    */
    908.   
    909. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    910.                     size_t num, const EC_POINT *points[],
    911.                     const BIGNUM *scalars[], BN_CTX *ctx)

crypto/ec/ec_lib.c:941:15: Call
    939.       else
    940.           /* use default */
    941.           ret = ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
                         ^
    942.   
    943.       BN_CTX_free(new_ctx);

crypto/ec/ec_mult.c:410:1: Parameter `group->field->top`
      408.    * in the addition if scalar != NULL
      409.    */
      410. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
      411.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
      412.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:453:20: Call
      451.                * always call the ladder version.
      452.                */
      453.               return ec_scalar_mul_ladder(group, r, scalar, NULL, ctx);
                                ^
      454.           }
      455.           if ((scalar == NULL) && (num == 1)) {

crypto/ec/ec_mult.c:253:13: Call
        251.           || (bn_wexpand(s->Y, group_top) == NULL)
        252.           || (bn_wexpand(s->Z, group_top) == NULL)
        253.           || (bn_wexpand(r->X, group_top) == NULL)
                           ^
        254.           || (bn_wexpand(r->Y, group_top) == NULL)
        255.           || (bn_wexpand(r->Z, group_top) == NULL)

crypto/bn/bn_lib.c:948:1: Parameter `*a->d`
          946.   }
          947.   
          948. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
          949.   {
          950.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/ec/ec_mult.c:354:9: Call
        352.       for (i = cardinality_bits - 1; i >= 0; i--) {
        353.           kbit = BN_is_bit_set(k, i) ^ pbit;
        354.           EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
                       ^
        355.   
        356.           /* Perform a single step of the Montgomery ladder */

crypto/bn/bn_lib.c:733:1: <Offset trace>
731.    * a and b cannot be the same number
732.    */
733. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
734.   {
735.       BN_ULONG t;

crypto/bn/bn_lib.c:733:1: Parameter `nwords`
          731.    * a and b cannot be the same number
          732.    */
          733. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
          734.   {
          735.       BN_ULONG t;

crypto/bn/bn_lib.c:733:1: <Length trace>
731.    * a and b cannot be the same number
732.    */
733. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
734.   {
735.       BN_ULONG t;

crypto/bn/bn_lib.c:733:1: Parameter `*a->d`
          731.    * a and b cannot be the same number
          732.    */
          733. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
          734.   {
          735.       BN_ULONG t;

crypto/bn/bn_lib.c:789:13: Array access: Offset: [10, +oo] Size: [0, 8388607] by call to `EC_POINT_mul` 
          787.       default:
          788.           for (i = 10; i < nwords; i++)
          789.               BN_CONSTTIME_SWAP(i);
                             ^
          790.           /* Fallthrough */
          791.       case 10:
