crypto/bn/bntest.c:698: error: BUFFER_OVERRUN_L3
  Offset: [16, +oo] Size: [0, +oo] by call to `BN_mul`.
Showing all 9 steps of the trace


crypto/bn/bntest.c:675:8: Call
673.   				BN_mod_mul(d,a,b,c,ctx);*/ /**/
674.   
675.   		if (!BN_mod_mul(e,a,b,c,ctx))
              ^
676.   			{
677.   			unsigned long l;

crypto/bn/bn_exp.c:66:1: Parameter `ret->top`
  64.   
  65.   /* slow but works */
  66. > int BN_mod_mul(BIGNUM *ret, BIGNUM *a, BIGNUM *b, BIGNUM *m, BN_CTX *ctx)
  67.   	{
  68.   	BIGNUM *t;

crypto/bn/bntest.c:698:3: Call
696.   			BIO_puts(bp,"\n");
697.   			}
698.   		BN_mul(d,a,b,ctx);
         ^
699.   		BN_sub(d,d,e);
700.   		BN_div(a,b,d,c,ctx);

crypto/bn/bn_mul.c:560:1: <Offset trace>
558.   #endif
559.   
560. > int BN_mul(BIGNUM *r, BIGNUM *a, BIGNUM *b, BN_CTX *ctx)
561.   	{
562.   	int top,al,bl;

crypto/bn/bn_mul.c:560:1: Parameter `a->top`
  558.   #endif
  559.   
  560. > int BN_mul(BIGNUM *r, BIGNUM *a, BIGNUM *b, BN_CTX *ctx)
  561.   	{
  562.   	int top,al,bl;

crypto/bn/bn_mul.c:577:2: Assignment
  575.   	bn_check_top(r);
  576.   
  577.   	al=a->top;
          ^
  578.   	bl=b->top;
  579.   	r->neg=a->neg^b->neg;

crypto/bn/bn_mul.c:560:1: <Length trace>
558.   #endif
559.   
560. > int BN_mul(BIGNUM *r, BIGNUM *a, BIGNUM *b, BN_CTX *ctx)
561.   	{
562.   	int top,al,bl;

crypto/bn/bn_mul.c:560:1: Parameter `*b->d`
  558.   #endif
  559.   
  560. > int BN_mul(BIGNUM *r, BIGNUM *a, BIGNUM *b, BN_CTX *ctx)
  561.   	{
  562.   	int top,al,bl;

crypto/bn/bn_mul.c:641:4: Array access: Offset: [16, +oo] Size: [0, +oo] by call to `BN_mul` 
  639.   			{
  640.   			bn_wexpand(b,al);
  641.   			b->d[bl]=0;
            ^
  642.   			bl++;
  643.   			goto symetric;
