crypto/bn/bntest.c:731: error: BUFFER_OVERRUN_L3
  Offset: [-15, +oo] (⇐ [0, 1] + [-15, +oo]) Size: 65 by call to `BN_hex2bn`.
Showing all 7 steps of the trace


crypto/bn/bntest.c:731:2: Call
729.   
730.   	/* Regression test for a BN_sqr overflow bug. */
731.   	BN_hex2bn(&a,
        ^
732.   		"80000000000000008000000000000001"
733.   		"FFFFFFFFFFFFFFFE0000000000000000");

crypto/bn/bn_print.c:184:7: <Offset trace>
182.   	if (*a == '-') { neg=1; a++; }
183.   
184.   	for (i=0; isxdigit((unsigned char) a[i]); i++)
             ^
185.   		;
186.   

crypto/bn/bn_print.c:184:7: Assignment
  182.   	if (*a == '-') { neg=1; a++; }
  183.   
  184.   	for (i=0; isxdigit((unsigned char) a[i]); i++)
               ^
  185.   		;
  186.   

crypto/bn/bn_print.c:204:2: Assignment
  202.   	if (bn_expand(ret,i*4) == NULL) goto err;
  203.   
  204.   	j=i; /* least significant 'hex' */
          ^
  205.   	m=0;
  206.   	h=0;

crypto/bn/bn_print.c:173:1: <Length trace>
171.   	}
172.   
173. > int BN_hex2bn(BIGNUM **bn, const char *a)
174.   	{
175.   	BIGNUM *ret=NULL;

crypto/bn/bn_print.c:173:1: Parameter `*a`
  171.   	}
  172.   
  173. > int BN_hex2bn(BIGNUM **bn, const char *a)
  174.   	{
  175.   	BIGNUM *ret=NULL;

crypto/bn/bn_print.c:213:6: Array access: Offset: [-15, +oo] (⇐ [0, 1] + [-15, +oo]) Size: 65 by call to `BN_hex2bn` 
  211.   		for (;;)
  212.   			{
  213.   			c=a[j-m];
              ^
  214.   			if ((c >= '0') && (c <= '9')) k=c-'0';
  215.   			else if ((c >= 'a') && (c <= 'f')) k=c-'a'+10;
