crypto/dsa/dsa_gen.c:528: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, 8388607] by call to `BN_div`.
Showing all 16 steps of the trace


crypto/dsa/dsa_gen.c:457:17: Call
455.   
456.               /* step 4 */
457.               r = BN_is_prime_fasttest_ex(q, DSS_prime_checks, ctx,
                       ^
458.                                           seed_in ? 1 : 0, cb);
459.               if (r > 0)

crypto/bn/bn_prime.c:387:13: Call
  385.           /* now 1 <= check < A */
  386.   
  387.           j = witness(check, A, A1, A1_odd, k, ctx, mont);
                     ^
  388.           if (j == -1)
  389.               goto err;

crypto/bn/bn_prime.c:482:10: Call
    480.                      BN_MONT_CTX *mont)
    481.   {
    482.       if (!BN_mod_exp_mont(w, w, a1_odd, a, ctx, mont)) /* w := w^a1_odd mod a */
                    ^
    483.           return -1;
    484.       if (BN_is_one(w))

crypto/bn/bn_exp.c:457:14: Call
      455.   
      456.       if (a->neg || BN_ucmp(a, m) >= 0) {
      457.           if (!BN_nnmod(val[0], a, m, ctx))
                          ^
      458.               goto err;
      459.           aa = val[0];

crypto/bn/bn_mod.c:126:11: Call
        124.        */
        125.   
        126.       if (!(BN_mod(r, m, d, ctx)))
                         ^
        127.           return 0;
        128.       if (!r->neg)

crypto/bn/bn_div.c:189:1: Parameter `*dv->d`
          187.    * If 'dv' or 'rm' is NULL, the respective value is not returned.
          188.    */
          189. > int BN_div(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, const BIGNUM *divisor,
          190.              BN_CTX *ctx)
          191.   {

crypto/dsa/dsa_gen.c:528:18: Call
526.               if (!BN_lshift1(r0, q))
527.                   goto err;
528.               if (!BN_mod(c, X, r0, ctx))
                        ^
529.                   goto err;
530.               if (!BN_sub(r0, c, BN_value_one()))

crypto/bn/bn_div.c:243:11: Call
  241.   
  242.       BN_CTX_start(ctx);
  243.       tmp = BN_CTX_get(ctx);
                   ^
  244.       snum = BN_CTX_get(ctx);
  245.       sdiv = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:284:5: Call
    282.       }
    283.       /* OK, make sure the returned bignum is "zero" */
    284.       BN_zero(ret);
               ^
    285.       ctx->used++;
    286.       CTXDBG_RET(ctx, ret);

crypto/bn/bn_lib.c:530:1: Parameter `*a->d`
      528.   }
      529.   
      530. > int BN_set_word(BIGNUM *a, BN_ULONG w)
      531.   {
      532.       bn_check_top(a);

crypto/bn/bn_div.c:462:9: Call
  460.            */
  461.           int neg = num->neg;
  462.           BN_rshift(rm, snum, norm_shift);
                 ^
  463.           if (!BN_is_zero(rm))
  464.               rm->neg = neg;

crypto/bn/bn_shift.c:169:1: <Length trace>
167.   }
168.   
169. > int BN_rshift(BIGNUM *r, const BIGNUM *a, int n)
170.   {
171.       int i, j, nw, lb, rb;

crypto/bn/bn_shift.c:169:1: Parameter `*a->d`
    167.   }
    168.   
    169. > int BN_rshift(BIGNUM *r, const BIGNUM *a, int n)
    170.   {
    171.       int i, j, nw, lb, rb;

crypto/bn/bn_shift.c:200:5: Assignment
    198.       }
    199.   
    200.       f = &(a->d[nw]);
               ^
    201.       t = r->d;
    202.       j = a->top - nw;

crypto/bn/bn_shift.c:209:15: Assignment
    207.               *(t++) = *(f++);
    208.       } else {
    209.           l = *(f++);
                         ^
    210.           for (i = j - 1; i != 0; i--) {
    211.               tmp = (l >> rb) & BN_MASK2;

crypto/bn/bn_shift.c:212:17: Array access: Offset: [1, +oo] Size: [0, 8388607] by call to `BN_div` 
    210.           for (i = j - 1; i != 0; i--) {
    211.               tmp = (l >> rb) & BN_MASK2;
    212.               l = *(f++);
                           ^
    213.               *(t++) = (tmp | (l << lb)) & BN_MASK2;
    214.           }
