crypto/ec/ec_mult.c:207: error: BUFFER_OVERRUN_L3
  Offset: 9 Size: [0, 8388607] by call to `BN_consttime_swap`.
Showing all 9 steps of the trace


crypto/ec/ec_mult.c:167:14: Call
165.   
166.       BN_CTX_start(ctx);
167.       lambda = BN_CTX_get(ctx);
                    ^
168.       k = BN_CTX_get(ctx);
169.       if (k == NULL)

crypto/bn/bn_ctx.c:229:5: Call
  227.       }
  228.       /* OK, make sure the returned bignum is "zero" */
  229.       BN_zero(ret);
             ^
  230.       ctx->used++;
  231.       CTXDBG_RET(ctx, ret);

crypto/bn/bn_lib.c:357:1: Parameter `*a->d`
    355.   }
    356.   
    357. > int BN_set_word(BIGNUM *a, BN_ULONG w)
    358.   {
    359.       bn_check_top(a);

crypto/bn/bn_lib.c:360:9: Call
    358.   {
    359.       bn_check_top(a);
    360.       if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
                   ^
    361.           return 0;
    362.       a->neg = 0;

crypto/bn/bn_lcl.h:651:1: Parameter `*a->d`
      649.                            const BIGNUM *add, const BIGNUM *rem, BN_CTX *ctx);
      650.   
      651. > static ossl_inline BIGNUM *bn_expand(BIGNUM *a, int bits)
      652.   {
      653.       if (bits > (INT_MAX - BN_BITS2 + 1))

crypto/ec/ec_mult.c:207:5: Call
205.        */
206.       kbit = BN_is_bit_set(lambda, order_bits);
207.       BN_consttime_swap(kbit, k, lambda, group_top + 1);
           ^
208.   
209.       group_top = bn_get_top(group->field);

crypto/bn/bn_lib.c:724:1: <Length trace>
722.    * a and b cannot be the same number
723.    */
724. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
725.   {
726.       BN_ULONG t;

crypto/bn/bn_lib.c:724:1: Parameter `*b->d`
  722.    * a and b cannot be the same number
  723.    */
  724. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  725.   {
  726.       BN_ULONG t;

crypto/bn/bn_lib.c:768:9: Array access: Offset: 9 Size: [0, 8388607] by call to `BN_consttime_swap` 
  766.           /* Fallthrough */
  767.       case 10:
  768.           BN_CONSTTIME_SWAP(9);   /* Fallthrough */
                 ^
  769.       case 9:
  770.           BN_CONSTTIME_SWAP(8);   /* Fallthrough */
