test/ecdsatest.c:144: error: BUFFER_OVERRUN_L3
  Offset: 0 Size: [0, 8388607] by call to `BN_dec2bn`.
Showing all 13 steps of the trace


test/ecdsatest.c:127:10: Call
125.   
126.       /* create the key */
127.       if (!TEST_ptr(key = EC_KEY_new_by_curve_name(nid)))
                ^
128.           goto x962_int_err;
129.       use_fake = 1;

crypto/ec/ec_key.c:25:19: Call
  23.   EC_KEY *EC_KEY_new_by_curve_name(int nid)
  24.   {
  25.       EC_KEY *ret = EC_KEY_new();
                          ^
  26.       if (ret == NULL)
  27.           return NULL;

crypto/ec/ec_key.c:20:12: Call
    18.   EC_KEY *EC_KEY_new(void)
    19.   {
    20.       return EC_KEY_new_method(NULL);
                     ^
    21.   }
    22.   

crypto/ec/ec_kmeth.c:123:5: Call
      121.   
      122.   err:
      123.       EC_KEY_free(ret);
                 ^
      124.       return NULL;
      125.   }

crypto/ec/ec_key.c:41:1: Parameter `r->priv_key->d`
        39.   }
        40.   
        41. > void EC_KEY_free(EC_KEY *r)
        42.   {
        43.       int i;

test/ecdsatest.c:144:10: Call
142.       if (!TEST_ptr(r = BN_new()) || !TEST_ptr(s = BN_new()))
143.           goto x962_int_err;
144.       if (!TEST_true(BN_dec2bn(&r, r_in)) || !TEST_true(BN_dec2bn(&s, s_in)))
                ^
145.           goto x962_int_err;
146.       ECDSA_SIG_get0(signature, &sig_r, &sig_s);

crypto/bn/bn_print.c:199:1: Parameter `*(*bn)->d`
  197.   }
  198.   
  199. > int BN_dec2bn(BIGNUM **bn, const char *a)
  200.   {
  201.       BIGNUM *ret = NULL;

crypto/bn/bn_print.c:232:9: Call
  230.       } else {
  231.           ret = *bn;
  232.           BN_zero(ret);
                 ^
  233.       }
  234.   

crypto/bn/bn_lib.c:358:1: <Length trace>
356.   }
357.   
358. > int BN_set_word(BIGNUM *a, BN_ULONG w)
359.   {
360.       bn_check_top(a);

crypto/bn/bn_lib.c:358:1: Parameter `*a->d`
    356.   }
    357.   
    358. > int BN_set_word(BIGNUM *a, BN_ULONG w)
    359.   {
    360.       bn_check_top(a);

crypto/bn/bn_lib.c:361:9: Call
    359.   {
    360.       bn_check_top(a);
    361.       if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
                   ^
    362.           return 0;
    363.       a->neg = 0;

crypto/bn/bn_lcl.h:660:1: Parameter `*a->d`
      658.                            const BIGNUM *add, const BIGNUM *rem, BN_CTX *ctx);
      659.   
      660. > static ossl_inline BIGNUM *bn_expand(BIGNUM *a, int bits)
      661.   {
      662.       if (bits > (INT_MAX - BN_BITS2 + 1))

crypto/bn/bn_lib.c:364:5: Array access: Offset: 0 Size: [0, 8388607] by call to `BN_dec2bn` 
    362.           return 0;
    363.       a->neg = 0;
    364.       a->d[0] = w;
               ^
    365.       a->top = (w ? 1 : 0);
    366.       a->flags &= ~BN_FLG_FIXED_TOP;
