crypto/ec/ecp_smpl.c:574: error: BUFFER_OVERRUN_L3
  Offset: 0 Size: [0, 8388607] by call to `BN_is_one`.
Showing all 7 steps of the trace


crypto/ec/ecp_smpl.c:534:1: Parameter `point->Z->d`
532.   }
533.   
534. > int ec_GFp_simple_point_get_affine_coordinates(const EC_GROUP *group,
535.                                                  const EC_POINT *point,
536.                                                  BIGNUM *x, BIGNUM *y,

crypto/ec/ecp_smpl.c:574:9: Call
572.       }
573.   
574.       if (BN_is_one(Z_)) {
               ^
575.           if (group->meth->field_decode) {
576.               if (x != NULL) {

crypto/bn/bn_lib.c:904:1: Parameter `*a->d`
  902.   }
  903.   
  904. > int BN_is_one(const BIGNUM *a)
  905.   {
  906.       return BN_abs_is_word(a, 1) && !a->neg;

crypto/bn/bn_lib.c:906:12: Call
  904.   int BN_is_one(const BIGNUM *a)
  905.   {
  906.       return BN_abs_is_word(a, 1) && !a->neg;
                    ^
  907.   }
  908.   

crypto/bn/bn_lib.c:894:1: <Length trace>
892.   }
893.   
894. > int BN_abs_is_word(const BIGNUM *a, const BN_ULONG w)
895.   {
896.       return ((a->top == 1) && (a->d[0] == w)) || ((w == 0) && (a->top == 0));

crypto/bn/bn_lib.c:894:1: Parameter `*a->d`
    892.   }
    893.   
    894. > int BN_abs_is_word(const BIGNUM *a, const BN_ULONG w)
    895.   {
    896.       return ((a->top == 1) && (a->d[0] == w)) || ((w == 0) && (a->top == 0));

crypto/bn/bn_lib.c:896:31: Array access: Offset: 0 Size: [0, 8388607] by call to `BN_is_one` 
    894.   int BN_abs_is_word(const BIGNUM *a, const BN_ULONG w)
    895.   {
    896.       return ((a->top == 1) && (a->d[0] == w)) || ((w == 0) && (a->top == 0));
                                         ^
    897.   }
    898.   
