crypto/bn/bn_print.c:252: error: BUFFER_OVERRUN_L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [2, +oo] by call to `bn_expand2`.
Showing all 7 steps of the trace


crypto/bn/bn_print.c:233:7: Assignment
231.   	if (*a == '-') { neg=1; a++; }
232.   
233.   	for (i=0; isdigit(a[i]); i++)
             ^
234.   		;
235.   

crypto/bn/bn_print.c:252:6: Call
250.   
251.   	/* i is the number of digests, a bit of an over expand; */
252.   	if (bn_expand(ret,i*4) == NULL) goto err;
            ^
253.   
254.   	j=BN_DEC_NUM-(i%BN_DEC_NUM);

crypto/bn/bn_lib.c:344:1: <Length trace>
342.   	}
343.   
344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
345.   	{
346.   	BN_ULONG *A,*B,*a;

crypto/bn/bn_lib.c:344:1: Parameter `words`
  342.   	}
  343.   
  344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
  345.   	{
  346.   	BN_ULONG *A,*B,*a;

crypto/bn/bn_lib.c:359:19: Array declaration
  357.   			return(NULL);
  358.   			}
  359.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
                           ^
  360.   		if (A == NULL)
  361.   			{

crypto/bn/bn_lib.c:359:5: Assignment
  357.   			return(NULL);
  358.   			}
  359.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
             ^
  360.   		if (A == NULL)
  361.   			{

crypto/bn/bn_lib.c:377:38: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [2, +oo] by call to `bn_expand2` 
  375.   				{
  376.   				A[0]=B[0]; A[1]=B[1]; A[2]=B[2]; A[3]=B[3];
  377.   				A[4]=B[4]; A[5]=B[5]; A[6]=B[6]; A[7]=B[7];
                                              ^
  378.   				A+=8;
  379.   				B+=8;
