test/ectest.c:1464: error: BUFFER_OVERRUN_L2
  Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `EC_GROUP_new_from_ecparameters`.
Showing all 10 steps of the trace


test/ectest.c:1464:13: Call
1462.       if (!TEST_ptr(group = EC_GROUP_new_by_curve_name(NID_secp112r1))
1463.           || !TEST_ptr(ecparameters = EC_GROUP_get_ecparameters(group, NULL))
1464.           || !TEST_ptr(group2 = EC_GROUP_new_from_ecparameters(ecparameters))
                    ^
1465.           || !TEST_int_eq(EC_GROUP_cmp(group, group2, NULL), 0))
1466.           goto err;

crypto/ec/ec_asn1.c:580:1: Parameter `params->fieldID->p.char_two->m`
  578.   }
  579.   
  580. > EC_GROUP *EC_GROUP_new_from_ecparameters(const ECPARAMETERS *params)
  581.   {
  582.       int ok = 0, tmp;

crypto/ec/ec_asn1.c:664:18: Call
  662.               if (!BN_set_bit(p, (int)char_two->m))
  663.                   goto err;
  664.               if (!BN_set_bit(p, (int)tmp_long))
                          ^
  665.                   goto err;
  666.               if (!BN_set_bit(p, 0))

crypto/bn/bn_lib.c:588:1: <Offset trace>
586.   }
587.   
588. > int BN_set_bit(BIGNUM *a, int n)
589.   {
590.       int i, j, k;

crypto/bn/bn_lib.c:588:1: Parameter `a->top`
    586.   }
    587.   
    588. > int BN_set_bit(BIGNUM *a, int n)
    589.   {
    590.       int i, j, k;

crypto/bn/bn_lib.c:588:1: <Length trace>
586.   }
587.   
588. > int BN_set_bit(BIGNUM *a, int n)
589.   {
590.       int i, j, k;

crypto/bn/bn_lib.c:588:1: Parameter `*a->d`
    586.   }
    587.   
    588. > int BN_set_bit(BIGNUM *a, int n)
    589.   {
    590.       int i, j, k;

crypto/bn/bn_lib.c:598:13: Call
    596.       j = n % BN_BITS2;
    597.       if (a->top <= i) {
    598.           if (bn_wexpand(a, i + 1) == NULL)
                       ^
    599.               return 0;
    600.           for (k = a->top; k < i + 1; k++)

crypto/bn/bn_lib.c:942:1: Parameter `*a->d`
      940.   }
      941.   
      942. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
      943.   {
      944.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/bn/bn_lib.c:601:13: Array access: Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `EC_GROUP_new_from_ecparameters` 
    599.               return 0;
    600.           for (k = a->top; k < i + 1; k++)
    601.               a->d[k] = 0;
                       ^
    602.           a->top = i + 1;
    603.           a->flags &= ~BN_FLG_FIXED_TOP;
