crypto/ec/ec2_smpl.c:689: error: BUFFER_OVERRUN_L3
  Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_copy`.
Showing all 10 steps of the trace


crypto/ec/ec2_smpl.c:682:9: Call
680.   
681.       BN_CTX_start(ctx);
682.       x = BN_CTX_get(ctx);
               ^
683.       y = BN_CTX_get(ctx);
684.       if (y == NULL)

crypto/bn/bn_ctx.c:229:5: Call
  227.       }
  228.       /* OK, make sure the returned bignum is "zero" */
  229.       BN_zero(ret);
             ^
  230.       ctx->used++;
  231.       CTXDBG_RET(ctx, ret);

crypto/bn/bn_lib.c:391:15: Assignment
    389.       a->neg = 0;
    390.       a->d[0] = w;
    391.       a->top = (w ? 1 : 0);
                         ^
    392.       bn_check_top(a);
    393.       return 1;

crypto/bn/bn_lib.c:391:5: Assignment
    389.       a->neg = 0;
    390.       a->d[0] = w;
    391.       a->top = (w ? 1 : 0);
               ^
    392.       bn_check_top(a);
    393.       return 1;

crypto/ec/ec2_smpl.c:689:10: Call
687.       if (!EC_POINT_get_affine_coordinates_GF2m(group, point, x, y, ctx))
688.           goto err;
689.       if (!BN_copy(point->X, x))
                ^
690.           goto err;
691.       if (!BN_copy(point->Y, y))

crypto/bn/bn_lib.c:312:1: <Offset trace>
310.   }
311.   
312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
313.   {
314.       bn_check_top(b);

crypto/bn/bn_lib.c:312:1: Parameter `b->top`
  310.   }
  311.   
  312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  313.   {
  314.       bn_check_top(b);

crypto/bn/bn_lib.c:312:1: <Length trace>
310.   }
311.   
312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
313.   {
314.       bn_check_top(b);

crypto/bn/bn_lib.c:312:1: Parameter `*b->d`
  310.   }
  311.   
  312. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  313.   {
  314.       bn_check_top(b);

crypto/bn/bn_lib.c:322:9: Array access: Offset added: [8, +oo] Size: [0, 536870848] by call to `BN_copy` 
  320.   
  321.       if (b->top > 0)
  322.           memcpy(a->d, b->d, sizeof(b->d[0]) * b->top);
                 ^
  323.   
  324.       a->top = b->top;
