crypto/ec/ec_curve.c:341: error: BUFFER_OVERRUN_L3
  Offset: [-7, +oo] (⇐ [0, 1] + [-7, +oo]) Size: 29 by call to `ec_group_new_GFp_from_hex`.
Showing all 9 steps of the trace


crypto/ec/ec_curve.c:341:9: Call
339.   	/* some wap/wtls curves */
340.   	case EC_GROUP_WTLS_6:
341.   		ret = ec_group_new_GFp_from_hex(_EC_GROUP_WTLS_6);
               ^
342.   		break;
343.   	case EC_GROUP_WTLS_8:

crypto/ec/ec_curve.c:213:1: Parameter `*prime_in`
  211.   		"0100000000000000000001CDC98AE0E2DE574ABF33",1
  212.   
  213. > static EC_GROUP *ec_group_new_GFp_from_hex(const char *prime_in,
  214.   	    const char *a_in, const char *b_in,
  215.   	    const char *x_in, const int y_bit, const char *order_in, const BN_ULONG cofac_in)

crypto/ec/ec_curve.c:227:7: Call
  225.   		(x = BN_new()) == NULL || (order = BN_new()) == NULL) goto bn_err;
  226.   	
  227.   	if (!BN_hex2bn(&prime, prime_in)) goto bn_err;
               ^
  228.   	if (!BN_hex2bn(&a, a_in)) goto bn_err;
  229.   	if (!BN_hex2bn(&b, b_in)) goto bn_err;

crypto/bn/bn_print.c:168:7: <Offset trace>
166.   	if (*a == '-') { neg=1; a++; }
167.   
168.   	for (i=0; isxdigit((unsigned char) a[i]); i++)
             ^
169.   		;
170.   

crypto/bn/bn_print.c:168:7: Assignment
    166.   	if (*a == '-') { neg=1; a++; }
    167.   
    168.   	for (i=0; isxdigit((unsigned char) a[i]); i++)
                 ^
    169.   		;
    170.   

crypto/bn/bn_print.c:188:2: Assignment
    186.   	if (bn_expand(ret,i*4) == NULL) goto err;
    187.   
    188.   	j=i; /* least significant 'hex' */
            ^
    189.   	m=0;
    190.   	h=0;

crypto/bn/bn_print.c:157:1: <Length trace>
155.   	}
156.   
157. > int BN_hex2bn(BIGNUM **bn, const char *a)
158.   	{
159.   	BIGNUM *ret=NULL;

crypto/bn/bn_print.c:157:1: Parameter `*a`
    155.   	}
    156.   
    157. > int BN_hex2bn(BIGNUM **bn, const char *a)
    158.   	{
    159.   	BIGNUM *ret=NULL;

crypto/bn/bn_print.c:197:6: Array access: Offset: [-7, +oo] (⇐ [0, 1] + [-7, +oo]) Size: 29 by call to `ec_group_new_GFp_from_hex` 
    195.   		for (;;)
    196.   			{
    197.   			c=a[j-m];
                ^
    198.   			if ((c >= '0') && (c <= '9')) k=c-'0';
    199.   			else if ((c >= 'a') && (c <= 'f')) k=c-'a'+10;
