crypto/ec/ec_mult.c:298: error: BUFFER_OVERRUN_L3
  Offset: 9 Size: [0, 8388607] by call to `BN_consttime_swap`.
Showing all 6 steps of the trace


crypto/ec/ec_mult.c:213:13: Call
211.           || (bn_wexpand(s->Y, group_top) == NULL)
212.           || (bn_wexpand(s->Z, group_top) == NULL)
213.           || (bn_wexpand(r->X, group_top) == NULL)
                   ^
214.           || (bn_wexpand(r->Y, group_top) == NULL)
215.           || (bn_wexpand(r->Z, group_top) == NULL))

crypto/bn/bn_lib.c:923:1: Parameter `*a->d`
  921.   }
  922.   
  923. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
  924.   {
  925.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/ec/ec_mult.c:298:9: Call
296.       for (i = order_bits - 1; i >= 0; i--) {
297.           kbit = BN_is_bit_set(k, i) ^ pbit;
298.           EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
               ^
299.           if (!EC_POINT_add(group, s, r, s, ctx))
300.               goto err;

crypto/bn/bn_lib.c:724:1: <Length trace>
722.    * a and b cannot be the same number
723.    */
724. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
725.   {
726.       BN_ULONG t;

crypto/bn/bn_lib.c:724:1: Parameter `*a->d`
  722.    * a and b cannot be the same number
  723.    */
  724. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  725.   {
  726.       BN_ULONG t;

crypto/bn/bn_lib.c:768:9: Array access: Offset: 9 Size: [0, 8388607] by call to `BN_consttime_swap` 
  766.           /* Fallthrough */
  767.       case 10:
  768.           BN_CONSTTIME_SWAP(9);   /* Fallthrough */
                 ^
  769.       case 9:
  770.           BN_CONSTTIME_SWAP(8);   /* Fallthrough */
