crypto/rsa/rsa_gen.c:189: error: BUFFER_OVERRUN_L3
  Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_gcd`.
Showing all 12 steps of the trace


crypto/rsa/rsa_gen.c:143:9: Call
141.       }
142.   
143.       if (BN_copy(rsa->e, e_value) == NULL)
               ^
144.           goto err;
145.   

crypto/bn/bn_lib.c:312:1: Parameter `a->top`
  310.   }
  311.   
  312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  313.   {
  314.       bn_check_top(b);

crypto/rsa/rsa_gen.c:189:18: Call
187.               if (!BN_sub(r2, prime, BN_value_one()))
188.                   goto err;
189.               if (!BN_gcd(r1, r2, rsa->e, ctx))
                        ^
190.                   goto err;
191.               if (BN_is_one(r1))

crypto/bn/bn_gcd.c:15:1: Parameter `in_b->top`
  13.   static BIGNUM *euclid(BIGNUM *a, BIGNUM *b);
  14.   
  15. > int BN_gcd(BIGNUM *r, const BIGNUM *in_a, const BIGNUM *in_b, BN_CTX *ctx)
  16.   {
  17.       BIGNUM *a, *b, *t;

crypto/bn/bn_gcd.c:31:9: Call
  29.       if (BN_copy(a, in_a) == NULL)
  30.           goto err;
  31.       if (BN_copy(b, in_b) == NULL)
                ^
  32.           goto err;
  33.       a->neg = 0;

crypto/bn/bn_lib.c:312:1: <Offset trace>
310.   }
311.   
312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
313.   {
314.       bn_check_top(b);

crypto/bn/bn_lib.c:312:1: Parameter `b->top`
    310.   }
    311.   
    312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
    313.   {
    314.       bn_check_top(b);

crypto/bn/bn_lib.c:312:1: <Length trace>
310.   }
311.   
312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
313.   {
314.       bn_check_top(b);

crypto/bn/bn_lib.c:312:1: Parameter `*a->d`
    310.   }
    311.   
    312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
    313.   {
    314.       bn_check_top(b);

crypto/bn/bn_lib.c:318:9: Call
    316.       if (a == b)
    317.           return a;
    318.       if (bn_wexpand(a, b->top) == NULL)
                   ^
    319.           return NULL;
    320.   

crypto/bn/bn_lib.c:937:1: Parameter `*a->d`
      935.   }
      936.   
      937. > BIGNUM *bn_wexpand(BIGNUM *a, int words)
      938.   {
      939.       return (words <= a->dmax) ? a : bn_expand2(a, words);

crypto/bn/bn_lib.c:322:9: Array access: Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_gcd` 
    320.   
    321.       if (b->top > 0)
    322.           memcpy(a->d, b->d, sizeof(b->d[0]) * b->top);
                   ^
    323.   
    324.       a->top = b->top;
