crypto/x509v3/v3_utl.c:153: error: BUFFER_OVERRUN_L3
  Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, 8388607] by call to `BN_bn2dec`.
Showing all 12 steps of the trace


crypto/x509v3/v3_utl.c:152:18: Call
150.       if (!a)
151.           return NULL;
152.       if ((bntmp = ASN1_ENUMERATED_to_BN(a, NULL)) == NULL
                        ^
153.           || (strtmp = BN_bn2dec(bntmp)) == NULL)
154.           X509V3err(X509V3_F_I2S_ASN1_ENUMERATED, ERR_R_MALLOC_FAILURE);

crypto/asn1/a_int.c:672:12: Call
  670.   BIGNUM *ASN1_ENUMERATED_to_BN(const ASN1_ENUMERATED *ai, BIGNUM *bn)
  671.   {
  672.       return asn1_string_to_bn(ai, bn, V_ASN1_ENUMERATED);
                    ^
  673.   }

crypto/asn1/a_int.c:563:1: Parameter `bn->d`
    561.   }
    562.   
    563. > static BIGNUM *asn1_string_to_bn(const ASN1_INTEGER *ai, BIGNUM *bn,
    564.                                    int itype)
    565.   {

crypto/x509v3/v3_utl.c:153:22: Call
151.           return NULL;
152.       if ((bntmp = ASN1_ENUMERATED_to_BN(a, NULL)) == NULL
153.           || (strtmp = BN_bn2dec(bntmp)) == NULL)
                            ^
154.           X509V3err(X509V3_F_I2S_ASN1_ENUMERATED, ERR_R_MALLOC_FAILURE);
155.       BN_free(bntmp);

crypto/bn/bn_print.c:106:1: Parameter `*a->d`
  104.   
  105.   /* Must 'OPENSSL_free' the returned data */
  106. > char *BN_bn2dec(const BIGNUM *a)
  107.   {
  108.       int i = 0, num, ok = 0;

crypto/bn/bn_print.c:128:14: Call
  126.           goto err;
  127.       }
  128.       if ((t = BN_dup(a)) == NULL)
                      ^
  129.           goto err;
  130.   

crypto/bn/bn_lib.c:410:1: Parameter `*a->d`
    408.   }
    409.   
    410. > BIGNUM *BN_dup(const BIGNUM *a)
    411.   {
    412.       BIGNUM *t;

crypto/bn/bn_lib.c:421:10: Call
    419.       if (t == NULL)
    420.           return NULL;
    421.       if (!BN_copy(t, a)) {
                    ^
    422.           BN_free(t);
    423.           return NULL;

crypto/bn/bn_lib.c:429:1: <Length trace>
427.   }
428.   
429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
430.   {
431.       int i;

crypto/bn/bn_lib.c:429:1: Parameter `*b->d`
      427.   }
      428.   
      429. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
      430.   {
      431.       int i;

crypto/bn/bn_lib.c:444:5: Assignment
      442.   #if 1
      443.       A = a->d;
      444.       B = b->d;
                 ^
      445.       for (i = b->top >> 2; i > 0; i--, A += 4, B += 4) {
      446.           BN_ULONG a0, a1, a2, a3;

crypto/bn/bn_lib.c:450:14: Array access: Offset: [3, +oo] (⇐ [0, +oo] + 3) Size: [0, 8388607] by call to `BN_bn2dec` 
      448.           a1 = B[1];
      449.           a2 = B[2];
      450.           a3 = B[3];
                          ^
      451.           A[0] = a0;
      452.           A[1] = a1;
