crypto/ec/ec_lib.c:930: error: BUFFER_OVERRUN_L3
  Offset: [1, 2] Size: [1, +oo] by call to `EC_POINTs_mul`.
Showing all 13 steps of the trace


crypto/ec/ec_lib.c:931:27: Assignment
929.   
930.       return EC_POINTs_mul(group, r, g_scalar,
931.                            (point != NULL
                                 ^
932.                             && p_scalar != NULL), points, scalars, ctx);
933.   }

crypto/ec/ec_lib.c:930:12: Call
928.       scalars[0] = p_scalar;
929.   
930.       return EC_POINTs_mul(group, r, g_scalar,
                  ^
931.                            (point != NULL
932.                             && p_scalar != NULL), points, scalars, ctx);

crypto/ec/ec_lib.c:908:1: Parameter `num`
  906.    */
  907.   
  908. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
  909.                     size_t num, const EC_POINT *points[],
  910.                     const BIGNUM *scalars[], BN_CTX *ctx)

crypto/ec/ec_lib.c:914:16: Call
  912.       if (group->meth->mul == 0)
  913.           /* use default */
  914.           return ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
                        ^
  915.   
  916.       return group->meth->mul(group, r, scalar, num, points, scalars, ctx);

crypto/ec/ec_mult.c:125:1: <Offset trace>
123.    * in the addition if scalar != NULL
124.    */
125. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
126.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
127.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:125:1: Parameter `num`
    123.    * in the addition if scalar != NULL
    124.    */
    125. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    126.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
    127.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:125:1: <Length trace>
123.    * in the addition if scalar != NULL
124.    */
125. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
126.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
127.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:125:1: Parameter `num`
    123.    * in the addition if scalar != NULL
    124.    */
    125. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    126.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
    127.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:219:5: Assignment
    217.       }
    218.   
    219.       totalnum = num + numblocks;
               ^
    220.   
    221.       wsize = OPENSSL_malloc(totalnum * sizeof(wsize[0]));

crypto/ec/ec_mult.c:224:12: Call
    222.       wNAF_len = OPENSSL_malloc(totalnum * sizeof(wNAF_len[0]));
    223.       /* include space for pivot */
    224.       wNAF = OPENSSL_malloc((totalnum + 1) * sizeof(wNAF[0]));
                      ^
    225.       val_sub = OPENSSL_malloc(totalnum * sizeof(val_sub[0]));
    226.   

crypto/mem.c:198:9: Assignment
      196.   
      197.       if (num == 0)
      198.           return NULL;
                     ^
      199.   
      200.       FAILTEST();

crypto/ec/ec_mult.c:224:5: Assignment
    222.       wNAF_len = OPENSSL_malloc(totalnum * sizeof(wNAF_len[0]));
    223.       /* include space for pivot */
    224.       wNAF = OPENSSL_malloc((totalnum + 1) * sizeof(wNAF[0]));
               ^
    225.       val_sub = OPENSSL_malloc(totalnum * sizeof(val_sub[0]));
    226.   

crypto/ec/ec_mult.c:247:9: Array access: Offset: [1, 2] Size: [1, +oo] by call to `EC_POINTs_mul` 
    245.           wsize[i] = EC_window_bits_for_scalar_size(bits);
    246.           num_val += (size_t)1 << (wsize[i] - 1);
    247.           wNAF[i + 1] = NULL;     /* make sure we always have a pivot */
                   ^
    248.           wNAF[i] =
    249.               bn_compute_wNAF((i < num ? scalars[i] : scalar), wsize[i],
