apps/ecparam.c:271: error: BUFFER_OVERRUN_L3
  Offset: [10, +oo] Size: [0, 8388607] by call to `EC_GROUP_check`.
Showing all 21 steps of the trace


apps/ecparam.c:236:17: Call
234.           }
235.   
236.           group = EC_GROUP_new_by_curve_name(nid);
                       ^
237.           if (group == NULL) {
238.               BIO_printf(bio_err, "unable to create curve (%s)\n", curve_name);

crypto/ec/ec_curve.c:3127:19: Call
  3125.       for (i = 0; i < curve_list_length; i++)
  3126.           if (curve_list[i].nid == nid) {
  3127.               ret = ec_group_new_from_data(curve_list[i]);
                            ^
  3128.               break;
  3129.           }

crypto/ec/ec_curve.c:3038:14: Call
    3036.       params += seed_len;         /* skip seed */
    3037.   
    3038.       if ((p = BN_bin2bn(params + 0 * param_len, param_len, NULL)) == NULL
                         ^
    3039.           || (a = BN_bin2bn(params + 1 * param_len, param_len, NULL)) == NULL
    3040.           || (b = BN_bin2bn(params + 2 * param_len, param_len, NULL)) == NULL) {

crypto/bn/bn_lib.c:372:1: Parameter `ret->top`
      370.   }
      371.   
      372. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
      373.   {
      374.       unsigned int i, m;

apps/ecparam.c:271:14: Call
269.       if (check) {
270.           BIO_printf(bio_err, "checking elliptic curve parameters: ");
271.           if (!EC_GROUP_check(group, NULL)) {
                    ^
272.               BIO_printf(bio_err, "failed\n");
273.               ERR_print_errors(bio_err);

crypto/ec/ec_check.c:13:1: Parameter `group->field->top`
  11.   #include <openssl/err.h>
  12.   
  13. > int EC_GROUP_check(const EC_GROUP *group, BN_CTX *ctx)
  14.   {
  15.       int ret = 0;

crypto/ec/ec_check.c:59:10: Call
  57.       }
  58.   
  59.       if (!EC_POINT_mul(group, point, order, NULL, NULL, ctx))
                 ^
  60.           goto err;
  61.       if (!EC_POINT_is_at_infinity(group, point)) {

crypto/ec/ec_lib.c:956:1: Parameter `group->field->top`
    954.   }
    955.   
    956. > int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *g_scalar,
    957.                    const EC_POINT *point, const BIGNUM *p_scalar, BN_CTX *ctx)
    958.   {

crypto/ec/ec_lib.c:967:12: Call
    965.       scalars[0] = p_scalar;
    966.   
    967.       return EC_POINTs_mul(group, r, g_scalar,
                      ^
    968.                            (point != NULL
    969.                             && p_scalar != NULL), points, scalars, ctx);

crypto/ec/ec_lib.c:918:1: Parameter `group->field->top`
      916.    */
      917.   
      918. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
      919.                     size_t num, const EC_POINT *points[],
      920.                     const BIGNUM *scalars[], BN_CTX *ctx)

crypto/ec/ec_lib.c:950:15: Call
      948.       else
      949.           /* use default */
      950.           ret = ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
                           ^
      951.   
      952.       BN_CTX_free(new_ctx);

crypto/ec/ec_mult.c:410:1: Parameter `group->field->top`
        408.    * in the addition if scalar != NULL
        409.    */
        410. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
        411.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
        412.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:453:20: Call
        451.                * always call the ladder version.
        452.                */
        453.               return ec_scalar_mul_ladder(group, r, scalar, NULL, ctx);
                                  ^
        454.           }
        455.           if ((scalar == NULL) && (num == 1)) {

crypto/ec/ec_mult.c:253:13: Call
          251.           || (bn_wexpand(s->Y, group_top) == NULL)
          252.           || (bn_wexpand(s->Z, group_top) == NULL)
          253.           || (bn_wexpand(r->X, group_top) == NULL)
                             ^
          254.           || (bn_wexpand(r->Y, group_top) == NULL)
          255.           || (bn_wexpand(r->Z, group_top) == NULL)

crypto/bn/bn_lib.c:949:1: Parameter `*a->d`
            947.   }
            948.   
            949. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
            950.   {
            951.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/ec/ec_mult.c:354:9: Call
          352.       for (i = cardinality_bits - 1; i >= 0; i--) {
          353.           kbit = BN_is_bit_set(k, i) ^ pbit;
          354.           EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
                         ^
          355.   
          356.           /* Perform a single step of the Montgomery ladder */

crypto/bn/bn_lib.c:734:1: <Offset trace>
732.    * a and b cannot be the same number
733.    */
734. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
735.   {
736.       BN_ULONG t;

crypto/bn/bn_lib.c:734:1: Parameter `nwords`
            732.    * a and b cannot be the same number
            733.    */
            734. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
            735.   {
            736.       BN_ULONG t;

crypto/bn/bn_lib.c:734:1: <Length trace>
732.    * a and b cannot be the same number
733.    */
734. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
735.   {
736.       BN_ULONG t;

crypto/bn/bn_lib.c:734:1: Parameter `*a->d`
            732.    * a and b cannot be the same number
            733.    */
            734. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
            735.   {
            736.       BN_ULONG t;

crypto/bn/bn_lib.c:790:13: Array access: Offset: [10, +oo] Size: [0, 8388607] by call to `EC_GROUP_check` 
            788.       default:
            789.           for (i = 10; i < nwords; i++)
            790.               BN_CONSTTIME_SWAP(i);
                               ^
            791.           /* Fallthrough */
            792.       case 10:
