crypto/bn/bntest.c:1003: error: BUFFER_OVERRUN_L3
  Offset: [0, 1] Size: [1, 2] by call to `BN_copy`.
Showing all 14 steps of the trace


crypto/bn/bntest.c:997:3: Call
995.   			}
996.   		BN_sub(c,a,b);
997.   		BN_sub(c,c,b);
          ^
998.   		if(!BN_is_zero(c) && !BN_is_one(c))
999.   		    {

crypto/bn/bn_add.c:258:1: Parameter `a->top`
  256.   	}
  257.   
  258. > int BN_sub(BIGNUM *r, BIGNUM *a, BIGNUM *b)
  259.   	{
  260.   	int max;

crypto/bn/bntest.c:1003:3: Call
1001.   		    return 0;
1002.   		    }
1003.   		BN_copy(a,b);
          ^
1004.   		}
1005.   	BN_free(a);

crypto/bn/bn_lib.c:499:1: Parameter `a->max`
  497.   	}
  498.   
  499. > BIGNUM *BN_copy(BIGNUM *a, BIGNUM *b)
  500.   	{
  501.   	int i;

crypto/bn/bn_lib.c:508:6: Call
  506.   
  507.   	if (a == b) return(a);
  508.   	if (bn_wexpand(a,b->top) == NULL) return(NULL);
              ^
  509.   
  510.   #if 1

crypto/bn/bn_lib.c:344:1: <Offset trace>
342.   	}
343.   
344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
345.   	{
346.   	BN_ULONG *A,*a;

crypto/bn/bn_lib.c:344:1: Parameter `b->top`
    342.   	}
    343.   
    344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
    345.   	{
    346.   	BN_ULONG *A,*a;

crypto/bn/bn_lib.c:344:1: <Length trace>
342.   	}
343.   
344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
345.   	{
346.   	BN_ULONG *A,*a;

crypto/bn/bn_lib.c:344:1: Parameter `words`
    342.   	}
    343.   
    344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
    345.   	{
    346.   	BN_ULONG *A,*a;

crypto/bn/bn_lib.c:360:19: Array declaration
    358.   			return(NULL);
    359.   			}
    360.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
                             ^
    361.   		if (A == NULL)
    362.   			{

crypto/bn/bn_lib.c:360:5: Assignment
    358.   			return(NULL);
    359.   			}
    360.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
               ^
    361.   		if (A == NULL)
    362.   			{

crypto/bn/bn_lib.c:360:3: Assignment
    358.   			return(NULL);
    359.   			}
    360.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
             ^
    361.   		if (A == NULL)
    362.   			{

crypto/bn/bn_lib.c:461:3: Assignment
    459.   			}
    460.   
    461.   		b->d=a;
             ^
    462.   		b->max=words;
    463.   

crypto/bn/bn_lib.c:466:3: Array access: Offset: [0, 1] Size: [1, 2] by call to `BN_copy` 
    464.   		/* Now need to zero any data between b->top and b->max */
    465.   
    466.   		A= &(b->d[b->top]);
             ^
    467.   		for (i=(b->max - b->top)>>3; i>0; i--,A+=8)
    468.   			{
