crypto/bn/bntest.c:1002: error: BUFFER_OVERRUN_L1
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [1, 2] by call to `BN_copy`.
Showing all 9 steps of the trace


crypto/bn/bntest.c:996:3: Call
994.   			}
995.   		BN_sub(c,a,b);
996.   		BN_sub(c,c,b);
         ^
997.   		if(!BN_is_zero(c) && !BN_is_one(c))
998.   		    {

crypto/bn/bn_add.c:258:1: Parameter `a->top`
  256.   	}
  257.   
  258. > int BN_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  259.   	{
  260.   	int max;

crypto/bn/bntest.c:1002:3: Call
1000.   		    return 0;
1001.   		    }
1002.   		BN_copy(a,b);
          ^
1003.   		}
1004.   	BN_free(a);

crypto/bn/bn_lib.c:501:1: Parameter `a->max`
  499.   	}
  500.   
  501. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  502.   	{
  503.   	int i;

crypto/bn/bn_lib.c:510:6: Call
  508.   
  509.   	if (a == b) return(a);
  510.   	if (bn_wexpand(a,b->top) == NULL) return(NULL);
              ^
  511.   
  512.   #if 1

crypto/bn/bn_lib.c:344:1: <Length trace>
342.   	}
343.   
344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
345.   	{
346.   	BN_ULONG *A,*a;

crypto/bn/bn_lib.c:344:1: Parameter `b->top`
    342.   	}
    343.   
    344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
    345.   	{
    346.   	BN_ULONG *A,*a;

crypto/bn/bn_lib.c:466:3: Assignment
    464.   		/* Now need to zero any data between b->top and b->max */
    465.   
    466.   		A= &(b->d[b->top]);
             ^
    467.   		for (i=(b->max - b->top)>>3; i>0; i--,A+=8)
    468.   			{

crypto/bn/bn_lib.c:470:28: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [1, 2] by call to `BN_copy` 
    468.   			{
    469.   			A[0]=0; A[1]=0; A[2]=0; A[3]=0;
    470.   			A[4]=0; A[5]=0; A[6]=0; A[7]=0;
                                      ^
    471.   			}
    472.   		for (i=(b->max - b->top)&7; i>0; i--,A++)
