crypto/x509v3/v3_utl.c:140: error: BUFFER_OVERRUN_L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `BN_bn2dec`.
Showing all 13 steps of the trace


crypto/x509v3/v3_utl.c:139:15: Call
137.   	char *strtmp = NULL;
138.   	if(!a) return NULL;
139.   	if(!(bntmp = ASN1_INTEGER_to_BN(a, NULL)) ||
                     ^
140.   	    !(strtmp = BN_bn2dec(bntmp)) )
141.   		X509V3err(X509V3_F_I2S_ASN1_INTEGER,ERR_R_MALLOC_FAILURE);

crypto/asn1/a_int.c:287:1: Parameter `*bn->d`
  285.   	}
  286.   
  287. > BIGNUM *ASN1_INTEGER_to_BN(ASN1_INTEGER *ai, BIGNUM *bn)
  288.   	{
  289.   	BIGNUM *ret;

crypto/asn1/a_int.c:291:11: Call
  289.   	BIGNUM *ret;
  290.   
  291.   	if ((ret=BN_bin2bn(ai->data,ai->length,bn)) == NULL)
                   ^
  292.   		ASN1err(ASN1_F_ASN1_INTEGER_TO_BN,ASN1_R_BN_LIB);
  293.   	return(ret);

crypto/bn/bn_lib.c:574:1: Parameter `*ret->d`
    572.   
    573.   /* ignore negative */
    574. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
    575.   	{
    576.   	unsigned int i,m;

crypto/x509v3/v3_utl.c:140:17: Call
138.   	if(!a) return NULL;
139.   	if(!(bntmp = ASN1_INTEGER_to_BN(a, NULL)) ||
140.   	    !(strtmp = BN_bn2dec(bntmp)) )
                       ^
141.   		X509V3err(X509V3_F_I2S_ASN1_INTEGER,ERR_R_MALLOC_FAILURE);
142.   	BN_free(bntmp);

crypto/bn/bn_print.c:103:1: Parameter `*a->d`
  101.   
  102.   /* Must 'Free' the returned data */
  103. > char *BN_bn2dec(BIGNUM *a)
  104.   	{
  105.   	int i=0,num;

crypto/bn/bn_print.c:120:9: Call
  118.   		goto err;
  119.   		}
  120.   	if ((t=BN_dup(a)) == NULL) goto err;
                 ^
  121.   
  122.   	p=buf;

crypto/bn/bn_lib.c:443:1: Parameter `*a->d`
    441.   	}
    442.   
    443. > BIGNUM *BN_dup(BIGNUM *a)
    444.   	{
    445.   	BIGNUM *r;

crypto/bn/bn_lib.c:451:19: Call
    449.   	r=BN_new();
    450.   	if (r == NULL) return(NULL);
    451.   	return((BIGNUM *)BN_copy(r,a));
                             ^
    452.   	}
    453.   

crypto/bn/bn_lib.c:454:1: <Length trace>
452.   	}
453.   
454. > BIGNUM *BN_copy(BIGNUM *a, BIGNUM *b)
455.   	{
456.   	int i;

crypto/bn/bn_lib.c:454:1: Parameter `*b->d`
      452.   	}
      453.   
      454. > BIGNUM *BN_copy(BIGNUM *a, BIGNUM *b)
      455.   	{
      456.   	int i;

crypto/bn/bn_lib.c:466:2: Assignment
      464.   #if 1
      465.   	A=a->d;
      466.   	B=b->d;
              ^
      467.   	for (i=b->top&(~7); i>0; i-=8)
      468.   		{

crypto/bn/bn_lib.c:476:8: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [0, +oo] by call to `BN_bn2dec` 
      474.   		A[5]=B[5];
      475.   		A[6]=B[6];
      476.   		A[7]=B[7];
                    ^
      477.   		A+=8;
      478.   		B+=8;
