crypto/bn/bntest.c:510: error: BUFFER_OVERRUN_L2
  Offset: [0, 4294967295] Size: 256 by call to `BN_div_word`.
Showing all 12 steps of the trace


crypto/bn/bntest.c:509:3: Call
507.   		} while (!s);
508.   
509.   		BN_copy(&b, &a);
         ^
510.   		r = BN_div_word(&b, s);
511.   

crypto/bn/bn_lib.c:482:1: Parameter `*a->d`
  480.   	}
  481.   
  482. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  483.   	{
  484.   	int i;

crypto/bn/bntest.c:506:4: Assignment
504.   			BN_bntest_rand(&a,512,-1,0);
505.   			BN_bntest_rand(&b,BN_BITS2,-1,0);
506.   			s = b.d[0];
          ^
507.   		} while (!s);
508.   

crypto/bn/bntest.c:510:7: Call
508.   
509.   		BN_copy(&b, &a);
510.   		r = BN_div_word(&b, s);
             ^
511.   
512.   		if (bp != NULL)

crypto/bn/bn_word.c:90:1: Parameter `w`
  88.   	}
  89.   
  90. > BN_ULONG BN_div_word(BIGNUM *a, BN_ULONG w)
  91.   	{
  92.   	BN_ULONG ret = 0;

crypto/bn/bn_word.c:96:2: Assignment
  94.   
  95.   	bn_check_top(a);
  96.   	w &= BN_MASK2;
         ^
  97.   
  98.   	if (!w)

crypto/bn/bn_word.c:105:17: Call
  103.   
  104.   	/* normalize input (so bn_div_words doesn't complain) */
  105.   	j = BN_BITS2 - BN_num_bits_word(w);
                         ^
  106.   	w <<= j;
  107.   	if (!BN_lshift(a, a, j))

crypto/bn/bn_lib.c:145:1: <Offset trace>
143.   	}
144.   
145. > int BN_num_bits_word(BN_ULONG l)
146.   	{
147.   	__fips_constseg

crypto/bn/bn_lib.c:145:1: Parameter `l`
    143.   	}
    144.   
    145. > int BN_num_bits_word(BN_ULONG l)
    146.   	{
    147.   	__fips_constseg

crypto/bn/bn_lib.c:148:2: <Length trace>
146.   	{
147.   	__fips_constseg
148.   	static const unsigned char bits[256]={
        ^
149.   		0,1,2,2,3,3,3,3,4,4,4,4,4,4,4,4,
150.   		5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,

crypto/bn/bn_lib.c:148:2: Array declaration
    146.   	{
    147.   	__fips_constseg
    148.   	static const unsigned char bits[256]={
            ^
    149.   		0,1,2,2,3,3,3,3,4,4,4,4,4,4,4,4,
    150.   		5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,

crypto/bn/bn_lib.c:217:12: Array access: Offset: [0, 4294967295] Size: 256 by call to `BN_div_word` 
    215.   			{
    216.   			if (l & 0xff000000L)
    217.   				return(bits[(int)(l>>24L)]+24);
                      ^
    218.   			else	return(bits[(int)(l>>16L)]+16);
    219.   			}
