crypto/ec/ec_asn1.c:1010: error: BUFFER_OVERRUN_L2
  Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `ec_asn1_pkparameters2group`.
Showing all 12 steps of the trace


crypto/ec/ec_asn1.c:1010:22: Call
1008.       if (priv_key->parameters) {
1009.           EC_GROUP_clear_free(ret->group);
1010.           ret->group = ec_asn1_pkparameters2group(priv_key->parameters);
                             ^
1011.       }
1012.   

crypto/ec/ec_asn1.c:904:1: Parameter `params->value.parameters->fieldID->p.char_two->m`
  902.   }
  903.   
  904. > EC_GROUP *ec_asn1_pkparameters2group(const ECPKPARAMETERS *params)
  905.   {
  906.       EC_GROUP *ret = NULL;

crypto/ec/ec_asn1.c:924:15: Call
  922.       } else if (params->type == 1) { /* the parameters are given by a
  923.                                        * ECPARAMETERS structure */
  924.           ret = ec_asn1_parameters2group(params->value.parameters);
                       ^
  925.           if (!ret) {
  926.               ECerr(EC_F_EC_ASN1_PKPARAMETERS2GROUP, ERR_R_EC_LIB);

crypto/ec/ec_asn1.c:670:1: Parameter `params->fieldID->p.char_two->m`
    668.   }
    669.   
    670. > static EC_GROUP *ec_asn1_parameters2group(const ECPARAMETERS *params)
    671.   {
    672.       int ok = 0, tmp;

crypto/ec/ec_asn1.c:749:18: Call
    747.               if (!BN_set_bit(p, (int)char_two->m))
    748.                   goto err;
    749.               if (!BN_set_bit(p, (int)tmp_long))
                            ^
    750.                   goto err;
    751.               if (!BN_set_bit(p, 0))

crypto/bn/bn_lib.c:671:1: <Offset trace>
669.   }
670.   
671. > int BN_set_bit(BIGNUM *a, int n)
672.   {
673.       int i, j, k;

crypto/bn/bn_lib.c:671:1: Parameter `a->top`
      669.   }
      670.   
      671. > int BN_set_bit(BIGNUM *a, int n)
      672.   {
      673.       int i, j, k;

crypto/bn/bn_lib.c:671:1: <Length trace>
669.   }
670.   
671. > int BN_set_bit(BIGNUM *a, int n)
672.   {
673.       int i, j, k;

crypto/bn/bn_lib.c:671:1: Parameter `*a->d`
      669.   }
      670.   
      671. > int BN_set_bit(BIGNUM *a, int n)
      672.   {
      673.       int i, j, k;

crypto/bn/bn_lib.c:681:13: Call
      679.       j = n % BN_BITS2;
      680.       if (a->top <= i) {
      681.           if (bn_wexpand(a, i + 1) == NULL)
                         ^
      682.               return (0);
      683.           for (k = a->top; k < i + 1; k++)

crypto/bn/bn_lib.c:995:1: Parameter `*a->d`
        993.   }
        994.   
        995. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
        996.   {
        997.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/bn/bn_lib.c:684:13: Array access: Offset: [-oo, 9223372036854775807] Size: [0, 8388607] by call to `ec_asn1_pkparameters2group` 
      682.               return (0);
      683.           for (k = a->top; k < i + 1; k++)
      684.               a->d[k] = 0;
                         ^
      685.           a->top = i + 1;
      686.       }
