crypto/ec/ec2_smpl.c:690: error: BUFFER_OVERRUN_L3
  Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_copy`.
Showing all 10 steps of the trace


crypto/ec/ec2_smpl.c:683:9: Call
681.   
682.       BN_CTX_start(ctx);
683.       x = BN_CTX_get(ctx);
               ^
684.       y = BN_CTX_get(ctx);
685.       if (y == NULL)

crypto/bn/bn_ctx.c:229:5: Call
  227.       }
  228.       /* OK, make sure the returned bignum is "zero" */
  229.       BN_zero(ret);
             ^
  230.       ctx->used++;
  231.       CTXDBG_RET(ctx, ret);

crypto/bn/bn_lib.c:405:15: Assignment
    403.       a->neg = 0;
    404.       a->d[0] = w;
    405.       a->top = (w ? 1 : 0);
                         ^
    406.       bn_check_top(a);
    407.       return 1;

crypto/bn/bn_lib.c:405:5: Assignment
    403.       a->neg = 0;
    404.       a->d[0] = w;
    405.       a->top = (w ? 1 : 0);
               ^
    406.       bn_check_top(a);
    407.       return 1;

crypto/ec/ec2_smpl.c:690:10: Call
688.       if (!EC_POINT_get_affine_coordinates_GF2m(group, point, x, y, ctx))
689.           goto err;
690.       if (!BN_copy(point->X, x))
                ^
691.           goto err;
692.       if (!BN_copy(point->Y, y))

crypto/bn/bn_lib.c:323:1: <Offset trace>
321.   }
322.   
323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
324.   {
325.       bn_check_top(b);

crypto/bn/bn_lib.c:323:1: Parameter `b->top`
  321.   }
  322.   
  323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  324.   {
  325.       bn_check_top(b);

crypto/bn/bn_lib.c:323:1: <Length trace>
321.   }
322.   
323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
324.   {
325.       bn_check_top(b);

crypto/bn/bn_lib.c:323:1: Parameter `*b->d`
  321.   }
  322.   
  323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  324.   {
  325.       bn_check_top(b);

crypto/bn/bn_lib.c:333:9: Array access: Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_copy` 
  331.   
  332.       if (b->top > 0)
  333.           memcpy(a->d, b->d, sizeof(b->d[0]) * b->top);
                 ^
  334.   
  335.       if (BN_get_flags(b, BN_FLG_CONSTTIME) != 0)
