crypto/ec/ecp_smpl.c:1298: error: BUFFER_OVERRUN_L3
  Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, 8388607] by call to `BN_copy`.
Showing all 7 steps of the trace


crypto/ec/ecp_smpl.c:1279:14: Call
1277.   
1278.       if (!BN_is_zero(points[0]->Z)) {
1279.           if (!BN_copy(prod_Z[0], points[0]->Z))
                     ^
1280.               goto err;
1281.       } else {

crypto/bn/bn_lib.c:429:1: Parameter `*a->d`
  427.   }
  428.   
  429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  430.   {
  431.       int i;

crypto/ec/ecp_smpl.c:1298:18: Call
1296.                   goto err;
1297.           } else {
1298.               if (!BN_copy(prod_Z[i], prod_Z[i - 1]))
                         ^
1299.                   goto err;
1300.           }

crypto/bn/bn_lib.c:429:1: <Length trace>
427.   }
428.   
429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
430.   {
431.       int i;

crypto/bn/bn_lib.c:429:1: Parameter `*b->d`
  427.   }
  428.   
  429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  430.   {
  431.       int i;

crypto/bn/bn_lib.c:444:5: Assignment
  442.   #if 1
  443.       A = a->d;
  444.       B = b->d;
             ^
  445.       for (i = b->top >> 2; i > 0; i--, A += 4, B += 4) {
  446.           BN_ULONG a0, a1, a2, a3;

crypto/bn/bn_lib.c:450:14: Array access: Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, 8388607] by call to `BN_copy` 
  448.           a1 = B[1];
  449.           a2 = B[2];
  450.           a3 = B[3];
                      ^
  451.           A[0] = a0;
  452.           A[1] = a1;
