test/ectest.c:214: error: BUFFER_OVERRUN_L3
  Offset: [0, 6] Size: [0, +oo] by call to `EC_POINTs_mul`.
Showing all 8 steps of the trace


test/ectest.c:214:14: Call
212.           scalars[5] = n2;
213.           points[5] = Q;          /* => infinity */
214.           if (!EC_POINTs_mul(group, P, NULL, 6, points, scalars, ctx))
                    ^
215.               ABORT;
216.           if (!EC_POINT_is_at_infinity(group, P))

crypto/ec/ec_lib.c:1010:1: Parameter `num`
  1008.    */
  1009.   
  1010. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
  1011.                     size_t num, const EC_POINT *points[],
  1012.                     const BIGNUM *scalars[], BN_CTX *ctx)

crypto/ec/ec_lib.c:1016:16: Call
  1014.       if (group->meth->mul == 0)
  1015.           /* use default */
  1016.           return ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
                         ^
  1017.   
  1018.       return group->meth->mul(group, r, scalar, num, points, scalars, ctx);

crypto/ec/ec_mult.c:193:1: Parameter `num`
    191.    * in the addition if scalar != NULL
    192.    */
    193. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    194.                   size_t num, const EC_POINT *points[], const BIGNUM *scalars[],
    195.                   BN_CTX *ctx)

crypto/ec/ec_mult.c:320:13: Call
    318.           wNAF[i + 1] = NULL;     /* make sure we always have a pivot */
    319.           wNAF[i] =
    320.               bn_compute_wNAF((i < num ? scalars[i] : scalar), wsize[i],
                       ^
    321.                               &wNAF_len[i]);
    322.           if (wNAF[i] == NULL)

crypto/bn/bn_intern.c:67:1: <Length trace>
65.    * w-1 zeros away from that next non-zero digit.
66.    */
67. > signed char *bn_compute_wNAF(const BIGNUM *scalar, int w, size_t *ret_len)
68.   {
69.       int window_val;

crypto/bn/bn_intern.c:67:1: Parameter `*ret_len`
      65.    * w-1 zeros away from that next non-zero digit.
      66.    */
      67. > signed char *bn_compute_wNAF(const BIGNUM *scalar, int w, size_t *ret_len)
      68.   {
      69.       int window_val;

crypto/bn/bn_intern.c:82:9: Array access: Offset: [0, 6] Size: [0, +oo] by call to `EC_POINTs_mul` 
      80.           }
      81.           r[0] = 0;
      82.           *ret_len = 1;
                    ^
      83.           return r;
      84.       }
