test/bntest.c:417: error: BUFFER_OVERRUN_L3
  Offset: [0, 49] Size: [0, 8388607] by call to `BN_set_bit`.
Showing all 7 steps of the trace


test/bntest.c:86:1: Assignment
84.   #include "../crypto/bn/bn_lcl.h"
85.   
86. > static const int num0 = 100;           /* number of tests */
87.   static const int num1 = 50;            /* additional tests for some functions */
88.   static const int num2 = 5;             /* number of tests for slow functions */

test/bntest.c:417:17: Call
415.               BN_bntest_rand(a, 512, 0, 0);
416.               BN_copy(b, a);
417.               if (BN_set_bit(a, i) == 0)
                       ^
418.                   return (0);
419.               BN_add_word(b, i);

crypto/bn/bn_lib.c:671:1: <Offset trace>
669.   }
670.   
671. > int BN_set_bit(BIGNUM *a, int n)
672.   {
673.       int i, j, k;

crypto/bn/bn_lib.c:671:1: Parameter `a->top`
  669.   }
  670.   
  671. > int BN_set_bit(BIGNUM *a, int n)
  672.   {
  673.       int i, j, k;

crypto/bn/bn_lib.c:671:1: <Length trace>
669.   }
670.   
671. > int BN_set_bit(BIGNUM *a, int n)
672.   {
673.       int i, j, k;

crypto/bn/bn_lib.c:671:1: Parameter `*a->d`
  669.   }
  670.   
  671. > int BN_set_bit(BIGNUM *a, int n)
  672.   {
  673.       int i, j, k;

crypto/bn/bn_lib.c:688:5: Array access: Offset: [0, 49] Size: [0, 8388607] by call to `BN_set_bit` 
  686.       }
  687.   
  688.       a->d[i] |= (((BN_ULONG)1) << j);
             ^
  689.       bn_check_top(a);
  690.       return (1);
