test/bntest.c:1890: error: BUFFER_OVERRUN_L3
  Offset: [1, +oo] Size: [0, 8388607] by call to `BN_mul`.
Showing all 13 steps of the trace


test/bntest.c:1886:10: Call
1884.   
1885.       /* Test that BN_mul never gives negative zero. */
1886.       if (!BN_set_word(a, 1))
                 ^
1887.           goto err;
1888.       BN_set_negative(a, 1);

crypto/bn/bn_lib.c:463:1: Parameter `*a->d`
  461.   }
  462.   
  463. > int BN_set_word(BIGNUM *a, BN_ULONG w)
  464.   {
  465.       bn_check_top(a);

crypto/bn/bn_lib.c:466:9: Call
  464.   {
  465.       bn_check_top(a);
  466.       if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
                 ^
  467.           return (0);
  468.       a->neg = 0;

crypto/bn/bn_lcl.h:674:1: Parameter `*a->d`
    672.   int bn_probable_prime_dh_coprime(BIGNUM *rnd, int bits, BN_CTX *ctx);
    673.   
    674. > static ossl_inline BIGNUM *bn_expand(BIGNUM *a, int bits)
    675.   {
    676.       if (bits > (INT_MAX - BN_BITS2 + 1))

test/bntest.c:1890:10: Call
1888.       BN_set_negative(a, 1);
1889.       BN_zero(b);
1890.       if (!BN_mul(c, a, b, ctx))
                 ^
1891.           goto err;
1892.       if (!BN_is_zero(c) || BN_is_negative(c)) {

crypto/bn/bn_mul.c:878:13: Assignment
  876.               if (bn_wexpand(rr, 16) == NULL)
  877.                   goto err;
  878.               rr->top = 16;
                     ^
  879.               bn_mul_comba8(rr->d, a->d, b->d);
  880.               goto end;

crypto/bn/bn_mul.c:972:5: Call
  970.   #endif
  971.       rr->neg = a->neg ^ b->neg;
  972.       bn_correct_top(rr);
             ^
  973.       if (r != rr && BN_copy(r, rr) == NULL)
  974.           goto err;

crypto/bn/bn_lib.c:1021:1: <Offset trace>
1019.   }
1020.   
1021. > void bn_correct_top(BIGNUM *a)
1022.   {
1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1021:1: Parameter `a->top`
    1019.   }
    1020.   
    1021. > void bn_correct_top(BIGNUM *a)
    1022.   {
    1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1024:5: Assignment
    1022.   {
    1023.       BN_ULONG *ftl;
    1024.       int tmp_top = a->top;
                ^
    1025.   
    1026.       if (tmp_top > 0) {

crypto/bn/bn_lib.c:1021:1: <Length trace>
1019.   }
1020.   
1021. > void bn_correct_top(BIGNUM *a)
1022.   {
1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1021:1: Parameter `*a->d`
    1019.   }
    1020.   
    1021. > void bn_correct_top(BIGNUM *a)
    1022.   {
    1023.       BN_ULONG *ftl;

crypto/bn/bn_lib.c:1027:14: Array access: Offset: [1, +oo] Size: [0, 8388607] by call to `BN_mul` 
    1025.   
    1026.       if (tmp_top > 0) {
    1027.           for (ftl = &(a->d[tmp_top]); tmp_top > 0; tmp_top--) {
                         ^
    1028.               ftl--;
    1029.               if (*ftl != 0)
