crypto/rsa/rsa_gen.c:160: error: BUFFER_OVERRUN_L1
  Offset: 13 Size: 13 by call to `BN_mod_inverse`.
Showing all 10 steps of the trace


crypto/rsa/rsa_gen.c:81:2: Assignment
79.   	r2= &(ctx->bn[2]);
80.   	r3= &(ctx->bn[3]);
81.   	ctx->tos+=4;
       ^
82.   
83.   	bitsp=(bits+1)/2;

crypto/rsa/rsa_gen.c:160:19: Call
158.   		}
159.   */
160.   	rsa->d=(BIGNUM *)BN_mod_inverse(NULL,rsa->e,r0,ctx2);	/* d */
                         ^
161.   	if (rsa->d == NULL) goto err;
162.   

crypto/bn/bn_gcd.c:148:1: Parameter `ctx->tos`
  146.   
  147.   /* solves ax == 1 (mod n) */
  148. > BIGNUM *BN_mod_inverse(BIGNUM *in, BIGNUM *a, BIGNUM *n, BN_CTX *ctx)
  149.   	{
  150.   	BIGNUM *A,*B,*X,*Y,*M,*D,*R;

crypto/bn/bn_gcd.c:163:2: Assignment
  161.   	M= &(ctx->bn[ctx->tos+4]);
  162.   	Y= &(ctx->bn[ctx->tos+5]);
  163.   	ctx->tos+=6;
          ^
  164.   	if (in == NULL)
  165.   		R=BN_new();

crypto/bn/bn_gcd.c:178:8: Call
  176.   	while (!BN_is_zero(B))
  177.   		{
  178.   		if (!BN_div(D,M,A,B,ctx)) goto err;
                ^
  179.   		T=A;
  180.   		A=B;

crypto/bn/bn_div.c:120:1: <Offset trace>
118.   #else
119.   
120. > int BN_div(BIGNUM *dv, BIGNUM *rm, BIGNUM *num, BIGNUM *divisor,
121.   	     BN_CTX *ctx)
122.   	{

crypto/bn/bn_div.c:120:1: Parameter `ctx->tos`
    118.   #else
    119.   
    120. > int BN_div(BIGNUM *dv, BIGNUM *rm, BIGNUM *num, BIGNUM *divisor,
    121.   	     BN_CTX *ctx)
    122.   	{

crypto/bn/bn_div.c:120:1: <Length trace>
118.   #else
119.   
120. > int BN_div(BIGNUM *dv, BIGNUM *rm, BIGNUM *num, BIGNUM *divisor,
121.   	     BN_CTX *ctx)
122.   	{

crypto/bn/bn_div.c:120:1: Parameter `ctx->bn[*]`
    118.   #else
    119.   
    120. > int BN_div(BIGNUM *dv, BIGNUM *rm, BIGNUM *num, BIGNUM *divisor,
    121.   	     BN_CTX *ctx)
    122.   	{

crypto/bn/bn_div.c:151:3: Array access: Offset: 13 Size: 13 by call to `BN_mod_inverse` 
    149.   	sdiv= &(ctx->bn[ctx->tos+2]);
    150.   	if (dv == NULL)
    151.   		res= &(ctx->bn[ctx->tos+3]);
             ^
    152.   	else	res=dv;
    153.   
