crypto/bn/bntest.c:735: error: BUFFER_OVERRUN_L1
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: 4 by call to `BN_set_word`.
Showing all 9 steps of the trace


crypto/bn/bntest.c:734:4: Call
732.   	a=BN_new();
733.   	b=BN_new();
734.   	c=BN_new();
          ^
735.   	BN_one(c);
736.   

crypto/bn/bn_lib.c:300:2: Assignment
  298.   		}
  299.   	ret->flags=BN_FLG_MALLOCED;
  300.   	ret->top=0;
          ^
  301.   	ret->neg=0;
  302.   	ret->max=0;

crypto/bn/bntest.c:735:2: Call
733.   	b=BN_new();
734.   	c=BN_new();
735.   	BN_one(c);
        ^
736.   
737.   	BN_rand(a,200,0,0); /**/

crypto/bn/bn_lib.c:548:1: Parameter `a->top`
  546.   	}
  547.   
  548. > int BN_set_word(BIGNUM *a, BN_ULONG w)
  549.   	{
  550.   	int i,n;

crypto/bn/bn_lib.c:551:6: Call
  549.   	{
  550.   	int i,n;
  551.   	if (bn_expand(a,sizeof(BN_ULONG)*8) == NULL) return(0);
              ^
  552.   
  553.   	n=sizeof(BN_ULONG)/BN_BYTES;

crypto/bn/bn_lib.c:344:1: <Length trace>
342.   	}
343.   
344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
345.   	{
346.   	BN_ULONG *A,*B,*a;

crypto/bn/bn_lib.c:344:1: Parameter `b->top`
    342.   	}
    343.   
    344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
    345.   	{
    346.   	BN_ULONG *A,*B,*a;

crypto/bn/bn_lib.c:418:3: Assignment
    416.   		/* Now need to zero any data between b->top and b->max */
    417.   
    418.   		B= &(b->d[b->top]);
             ^
    419.   		j=(b->max - b->top) & ~7;
    420.   		for (i=0; i<j; i+=8)

crypto/bn/bn_lib.c:423:28: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: 4 by call to `BN_set_word` 
    421.   			{
    422.   			B[0]=0; B[1]=0; B[2]=0; B[3]=0;
    423.   			B[4]=0; B[5]=0; B[6]=0; B[7]=0;
                                      ^
    424.   			B+=8;
    425.   			}
