test/bntest.c:1160: error: BUFFER_OVERRUN_L3
  Offset: 0 Size: [0, 8388607] by call to `BN_set_bit`.
Showing all 6 steps of the trace


test/bntest.c:1160:10: Call
1158.   
1159.       /* Set the LSB to 1 and test rshift1 again. */
1160.       if (!TEST_true(BN_set_bit(lshift1, 0))
                 ^
1161.               || !TEST_true(BN_div(ret, NULL /* rem */ , lshift1, two, ctx))
1162.               || !equalBN("(LShift1 | 1) / 2", a, ret)

crypto/bn/bn_lib.c:608:1: <Offset trace>
606.   }
607.   
608. > int BN_set_bit(BIGNUM *a, int n)
609.   {
610.       int i, j, k;

crypto/bn/bn_lib.c:608:1: Parameter `a->top`
  606.   }
  607.   
  608. > int BN_set_bit(BIGNUM *a, int n)
  609.   {
  610.       int i, j, k;

crypto/bn/bn_lib.c:608:1: <Length trace>
606.   }
607.   
608. > int BN_set_bit(BIGNUM *a, int n)
609.   {
610.       int i, j, k;

crypto/bn/bn_lib.c:608:1: Parameter `*a->d`
  606.   }
  607.   
  608. > int BN_set_bit(BIGNUM *a, int n)
  609.   {
  610.       int i, j, k;

crypto/bn/bn_lib.c:626:5: Array access: Offset: 0 Size: [0, 8388607] by call to `BN_set_bit` 
  624.       }
  625.   
  626.       a->d[i] |= (((BN_ULONG)1) << j);
             ^
  627.       bn_check_top(a);
  628.       return 1;
