apps/prime.c:126: error: BUFFER_OVERRUN_L3
  Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, 8388607] by call to `BN_bn2dec`.
Showing all 11 steps of the trace


apps/prime.c:125:9: Call
123.           }
124.           bn = BN_new();
125.           BN_generate_prime_ex(bn, bits, safe, NULL, NULL, NULL);
               ^
126.           s = hex ? BN_bn2hex(bn) : BN_bn2dec(bn);
127.           BIO_printf(bio_out, "%s\n", s);

crypto/bn/bn_prime.c:208:1: Parameter `*ret->d`
  206.   }
  207.   
  208. > int BN_generate_prime_ex(BIGNUM *ret, int bits, int safe,
  209.                            const BIGNUM *add, const BIGNUM *rem, BN_GENCB *cb)
  210.   {

apps/prime.c:126:35: Call
124.           bn = BN_new();
125.           BN_generate_prime_ex(bn, bits, safe, NULL, NULL, NULL);
126.           s = hex ? BN_bn2hex(bn) : BN_bn2dec(bn);
                                         ^
127.           BIO_printf(bio_out, "%s\n", s);
128.           OPENSSL_free(s);

crypto/bn/bn_print.c:106:1: Parameter `*a->d`
  104.   
  105.   /* Must 'OPENSSL_free' the returned data */
  106. > char *BN_bn2dec(const BIGNUM *a)
  107.   {
  108.       int i = 0, num, ok = 0;

crypto/bn/bn_print.c:128:14: Call
  126.           goto err;
  127.       }
  128.       if ((t = BN_dup(a)) == NULL)
                      ^
  129.           goto err;
  130.   

crypto/bn/bn_lib.c:410:1: Parameter `*a->d`
    408.   }
    409.   
    410. > BIGNUM *BN_dup(const BIGNUM *a)
    411.   {
    412.       BIGNUM *t;

crypto/bn/bn_lib.c:421:10: Call
    419.       if (t == NULL)
    420.           return NULL;
    421.       if (!BN_copy(t, a)) {
                    ^
    422.           BN_free(t);
    423.           return NULL;

crypto/bn/bn_lib.c:429:1: <Length trace>
427.   }
428.   
429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
430.   {
431.       int i;

crypto/bn/bn_lib.c:429:1: Parameter `*b->d`
      427.   }
      428.   
      429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
      430.   {
      431.       int i;

crypto/bn/bn_lib.c:444:5: Assignment
      442.   #if 1
      443.       A = a->d;
      444.       B = b->d;
                 ^
      445.       for (i = b->top >> 2; i > 0; i--, A += 4, B += 4) {
      446.           BN_ULONG a0, a1, a2, a3;

crypto/bn/bn_lib.c:450:14: Array access: Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, 8388607] by call to `BN_bn2dec` 
      448.           a1 = B[1];
      449.           a2 = B[2];
      450.           a3 = B[3];
                          ^
      451.           A[0] = a0;
      452.           A[1] = a1;
