crypto/rsa/rsa_chk.c:138: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, 8388607] by call to `BN_sub`.
Showing all 10 steps of the trace


crypto/rsa/rsa_chk.c:138:34: Call
136.       for (idx = 0; idx < ex_primes; idx++) {
137.           pinfo = sk_RSA_PRIME_INFO_value(key->prime_infos, idx);
138.           if (!BN_sub(k, pinfo->r, BN_value_one())) {
                                        ^
139.               ret = -1;
140.               goto err;

crypto/bn/bn_lib.c:85:9: Assignment
  83.       static const BN_ULONG data_one = 1L;
  84.       static const BIGNUM const_one =
  85.           { (BN_ULONG *)&data_one, 1, 1, 0, BN_FLG_STATIC_DATA };
                ^
  86.   
  87.       return &const_one;

crypto/rsa/rsa_chk.c:138:14: Call
136.       for (idx = 0; idx < ex_primes; idx++) {
137.           pinfo = sk_RSA_PRIME_INFO_value(key->prime_infos, idx);
138.           if (!BN_sub(k, pinfo->r, BN_value_one())) {
                    ^
139.               ret = -1;
140.               goto err;

crypto/bn/bn_add.c:45:1: Parameter `*a->d`
  43.   
  44.   /* signed sub of b from a. */
  45. > int BN_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  46.   {
  47.       int ret, r_neg, cmp_res;

crypto/bn/bn_add.c:59:19: Call
  57.           if (cmp_res > 0) {
  58.               r_neg = a->neg;
  59.               ret = BN_usub(r, a, b);
                          ^
  60.           } else if (cmp_res < 0) {
  61.               r_neg = !b->neg;

crypto/bn/bn_add.c:125:1: <Length trace>
123.   
124.   /* unsigned subtraction of b from a, a must be larger than b. */
125. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
126.   {
127.       int max, min, dif;

crypto/bn/bn_add.c:125:1: Parameter `b->top`
    123.   
    124.   /* unsigned subtraction of b from a, a must be larger than b. */
    125. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
    126.   {
    127.       int max, min, dif;

crypto/bn/bn_add.c:135:5: Assignment
    133.   
    134.       max = a->top;
    135.       min = b->top;
               ^
    136.       dif = max - min;
    137.   

crypto/bn/bn_add.c:151:5: Assignment
    149.   
    150.       borrow = bn_sub_words(rp, ap, bp, min);
    151.       ap += min;
               ^
    152.       rp += min;
    153.   

crypto/bn/bn_add.c:156:14: Array access: Offset: [1, +oo] Size: [0, 8388607] by call to `BN_sub` 
    154.       while (dif) {
    155.           dif--;
    156.           t1 = *(ap++);
                        ^
    157.           t2 = (t1 - borrow) & BN_MASK2;
    158.           *(rp++) = t2;
