test/bntest.c:1555: error: BUFFER_OVERRUN_L2
  Offset: [0, 536870912] (⇐ [0, 1] + [0, 536870911]) Size: 3 by call to `BN_hex2bn`.
Showing all 6 steps of the trace


test/bntest.c:1555:5: Call
1553.       /* Regression test for carry propagation bug in sqr8x_reduction */
1554.       BN_hex2bn(&a, "050505050505");
1555.       BN_hex2bn(&b, "02");
            ^
1556.       BN_hex2bn(&c,
1557.           "4141414141414141414141274141414141414141414141414141414141414141"

crypto/bn/bn_conv.c:141:10: <Offset trace>
139.       }
140.   
141.       for (i = 0; i <= INT_MAX / 4 && ossl_isxdigit(a[i]); i++)
                ^
142.           continue;
143.   

crypto/bn/bn_conv.c:141:10: Assignment
  139.       }
  140.   
  141.       for (i = 0; i <= INT_MAX / 4 && ossl_isxdigit(a[i]); i++)
                  ^
  142.           continue;
  143.   

crypto/bn/bn_conv.c:126:1: <Length trace>
124.   #endif
125.   
126. > int BN_hex2bn(BIGNUM **bn, const char *a)
127.   {
128.       BIGNUM *ret = NULL;

crypto/bn/bn_conv.c:126:1: Parameter `*a`
  124.   #endif
  125.   
  126. > int BN_hex2bn(BIGNUM **bn, const char *a)
  127.   {
  128.       BIGNUM *ret = NULL;

crypto/bn/bn_conv.c:141:37: Array access: Offset: [0, 536870912] (⇐ [0, 1] + [0, 536870911]) Size: 3 by call to `BN_hex2bn` 
  139.       }
  140.   
  141.       for (i = 0; i <= INT_MAX / 4 && ossl_isxdigit(a[i]); i++)
                                             ^
  142.           continue;
  143.   
