crypto/ec/ecdh_ossl.c:80: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, 8388607] by call to `BN_mul`.
Showing all 11 steps of the trace


crypto/ec/ecdh_ossl.c:79:14: Call
77.   
78.       if (EC_KEY_get_flags(ecdh) & EC_FLAG_COFACTOR_ECDH) {
79.           if (!EC_GROUP_get_cofactor(group, x, NULL) ||
                   ^
80.               !BN_mul(x, x, priv_key, ctx)) {
81.               ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);

crypto/ec/ec_lib.c:333:1: Parameter `cofactor->d`
  331.   }
  332.   
  333. > int EC_GROUP_get_cofactor(const EC_GROUP *group, BIGNUM *cofactor,
  334.                             BN_CTX *ctx)
  335.   {

crypto/ec/ecdh_ossl.c:80:14: Call
78.       if (EC_KEY_get_flags(ecdh) & EC_FLAG_COFACTOR_ECDH) {
79.           if (!EC_GROUP_get_cofactor(group, x, NULL) ||
80.               !BN_mul(x, x, priv_key, ctx)) {
                   ^
81.               ECerr(EC_F_ECDH_SIMPLE_COMPUTE_KEY, ERR_R_MALLOC_FAILURE);
82.               goto err;

crypto/bn/bn_mul.c:880:13: Assignment
  878.               if (bn_wexpand(rr, 16) == NULL)
  879.                   goto err;
  880.               rr->top = 16;
                     ^
  881.               bn_mul_comba8(rr->d, a->d, b->d);
  882.               goto end;

crypto/bn/bn_mul.c:973:5: Call
  971.    end:
  972.   #endif
  973.       bn_correct_top(rr);
             ^
  974.       if (r != rr)
  975.           BN_copy(r, rr);

crypto/bn/bn_lib.c:1019:1: <Offset trace>
1017.   }
1018.   
1019. > void bn_correct_top(BIGNUM *a)
1020.   {
1021.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1019:1: Parameter `a->top`
    1017.   }
    1018.   
    1019. > void bn_correct_top(BIGNUM *a)
    1020.   {
    1021.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1022:5: Assignment
    1020.   {
    1021.       BN_ULONG *ftl;
    1022.       int tmp_top = a->top;
                ^
    1023.   
    1024.       if (tmp_top > 0) {

crypto/bn/bn_lib.c:1019:1: <Length trace>
1017.   }
1018.   
1019. > void bn_correct_top(BIGNUM *a)
1020.   {
1021.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1019:1: Parameter `*a->d`
    1017.   }
    1018.   
    1019. > void bn_correct_top(BIGNUM *a)
    1020.   {
    1021.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1025:14: Array access: Offset: [1, +oo] Size: [0, 8388607] by call to `BN_mul` 
    1023.   
    1024.       if (tmp_top > 0) {
    1025.           for (ftl = &(a->d[tmp_top]); tmp_top > 0; tmp_top--) {
                         ^
    1026.               ftl--;
    1027.               if (*ftl != 0)
