crypto/ec/ec2_mult.c:333: error: BUFFER_OVERRUN_L3
  Offset: 8 Size: [0, 8388607] by call to `BN_consttime_swap`.
Showing all 6 steps of the trace


crypto/ec/ec2_mult.c:335:18: Call
333.               BN_consttime_swap(word & mask, x1, x2, bn_get_top(group->field));
334.               BN_consttime_swap(word & mask, z1, z2, bn_get_top(group->field));
335.               if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx))
                        ^
336.                   goto err;
337.               if (!gf2m_Mdouble(group, x1, z1, ctx))

crypto/ec/ec2_mult.c:126:1: Parameter `x1->d`
  124.    *     GF(2^m) without precomputation" (CHES '99, LNCS 1717).
  125.    */
  126. > static int gf2m_Madd(const EC_GROUP *group, const BIGNUM *x, BIGNUM *x1,
  127.                        BIGNUM *z1, const BIGNUM *x2, const BIGNUM *z2,
  128.                        BN_CTX *ctx)

crypto/ec/ec2_mult.c:333:13: Call
331.           word = bn_get_words(scalar)[i];
332.           while (mask) {
333.               BN_consttime_swap(word & mask, x1, x2, bn_get_top(group->field));
                   ^
334.               BN_consttime_swap(word & mask, z1, z2, bn_get_top(group->field));
335.               if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx))

crypto/bn/bn_lib.c:809:1: <Length trace>
807.    * a and b cannot be the same number
808.    */
809. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
810.   {
811.       BN_ULONG t;

crypto/bn/bn_lib.c:809:1: Parameter `*b->d`
  807.    * a and b cannot be the same number
  808.    */
  809. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  810.   {
  811.       BN_ULONG t;

crypto/bn/bn_lib.c:842:9: Array access: Offset: 8 Size: [0, 8388607] by call to `BN_consttime_swap` 
  840.           BN_CONSTTIME_SWAP(9);   /* Fallthrough */
  841.       case 9:
  842.           BN_CONSTTIME_SWAP(8);   /* Fallthrough */
                 ^
  843.       case 8:
  844.           BN_CONSTTIME_SWAP(7);   /* Fallthrough */
