crypto/bn/bn_prime.c:196: error: BUFFER_OVERRUN_L3
  Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_copy`.
Showing all 13 steps of the trace


crypto/bn/bn_prime.c:153:1: Parameter `a->top`
151.   }
152.   
153. > int BN_is_prime_fasttest_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
154.                               int do_trial_division, BN_GENCB *cb)
155.   {

crypto/bn/bn_prime.c:163:9: Call
161.       const BIGNUM *A = NULL;
162.   
163.       if (BN_cmp(a, BN_value_one()) <= 0)
               ^
164.           return 0;
165.   

crypto/bn/bn_lib.c:577:1: Parameter `a->top`
  575.   }
  576.   
  577. > int BN_cmp(const BIGNUM *a, const BIGNUM *b)
  578.   {
  579.       int i;

crypto/bn/bn_prime.c:170:10: Call
168.   
169.       /* first look for small factors */
170.       if (!BN_is_odd(a))
                ^
171.           /* a is even => a is prime if and only if a == 2 */
172.           return BN_is_word(a, 2);

crypto/bn/bn_lib.c:867:1: Parameter `a->top`
  865.   }
  866.   
  867. > int BN_is_odd(const BIGNUM *a)
  868.   {
  869.       return (a->top > 0) && (a->d[0] & 1);

crypto/bn/bn_prime.c:196:13: Call
194.           if ((t = BN_CTX_get(ctx)) == NULL)
195.               goto err;
196.           if (BN_copy(t, a) == NULL)
                   ^
197.               goto err;
198.           t->neg = 0;

crypto/bn/bn_lib.c:323:1: <Offset trace>
321.   }
322.   
323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
324.   {
325.       bn_check_top(b);

crypto/bn/bn_lib.c:323:1: Parameter `b->top`
  321.   }
  322.   
  323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  324.   {
  325.       bn_check_top(b);

crypto/bn/bn_lib.c:323:1: <Length trace>
321.   }
322.   
323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
324.   {
325.       bn_check_top(b);

crypto/bn/bn_lib.c:323:1: Parameter `*a->d`
  321.   }
  322.   
  323. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  324.   {
  325.       bn_check_top(b);

crypto/bn/bn_lib.c:329:9: Call
  327.       if (a == b)
  328.           return a;
  329.       if (bn_wexpand(a, b->top) == NULL)
                 ^
  330.           return NULL;
  331.   

crypto/bn/bn_lib.c:948:1: Parameter `*a->d`
    946.   }
    947.   
    948. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
    949.   {
    950.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/bn/bn_lib.c:333:9: Array access: Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_copy` 
  331.   
  332.       if (b->top > 0)
  333.           memcpy(a->d, b->d, sizeof(b->d[0]) * b->top);
                 ^
  334.   
  335.       a->top = b->top;
