crypto/bn/bn_nist.c:448: error: BUFFER_OVERRUN_L3
  Offset: 5 Size: [0, 16777214].
Showing all 6 steps of the trace


crypto/bn/bn_nist.c:367:1: <Length trace>
365.           }
366.   
367. > int BN_nist_mod_192(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
368.                       BN_CTX *ctx)
369.   {

crypto/bn/bn_nist.c:367:1: Parameter `*a->d`
365.           }
366.   
367. > int BN_nist_mod_192(BIGNUM *r, const BIGNUM *a, const BIGNUM *field,
368.                       BN_CTX *ctx)
369.   {

crypto/bn/bn_nist.c:372:5: Assignment
370.       int top = a->top, i;
371.       int carry;
372.       register BN_ULONG *r_d, *a_d = a->d;
           ^
373.       union {
374.           BN_ULONG bn[BN_NIST_192_TOP];

crypto/bn/bn_nist.c:405:9: Assignment
403.           nist_cp_bn(r_d, a_d, BN_NIST_192_TOP);
404.       } else
405.           r_d = a_d;
               ^
406.   
407.       nist_cp_bn_0(buf.bn, a_d + BN_NIST_192_TOP, top - BN_NIST_192_TOP,

crypto/bn/bn_nist.c:413:9: Assignment
411.       {
412.           NIST_INT64 acc;         /* accumulator */
413.           unsigned int *rp = (unsigned int *)r_d;
               ^
414.           const unsigned int *bp = (const unsigned int *)buf.ui;
415.   

crypto/bn/bn_nist.c:448:16: Array access: Offset: 5 Size: [0, 16777214]
446.           acc >>= 32;
447.   
448.           acc += rp[5];
                      ^
449.           acc += bp[4 * 2 - 5];
450.           acc += bp[5 * 2 - 5];
