crypto/bn/bn_exp.c:495: error: BUFFER_OVERRUN_L3
  Offset: 0 Size: [0, 8388607].
Showing all 5 steps of the trace


crypto/bn/bn_exp.c:437:9: <Length trace>
435.   
436.       BN_CTX_start(ctx);
437.       d = BN_CTX_get(ctx);
               ^
438.       r = BN_CTX_get(ctx);
439.       val[0] = BN_CTX_get(ctx);

crypto/bn/bn_exp.c:437:9: Call
435.   
436.       BN_CTX_start(ctx);
437.       d = BN_CTX_get(ctx);
               ^
438.       r = BN_CTX_get(ctx);
439.       val[0] = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:284:5: Call
  282.       }
  283.       /* OK, make sure the returned bignum is "zero" */
  284.       BN_zero(ret);
             ^
  285.       ctx->used++;
  286.       CTXDBG_RET(ctx, ret);

crypto/bn/bn_lib.c:530:1: Parameter `*a->d`
    528.   }
    529.   
    530. > int BN_set_word(BIGNUM *a, BN_ULONG w)
    531.   {
    532.       bn_check_top(a);

crypto/bn/bn_exp.c:495:9: Array access: Offset: 0 Size: [0, 8388607]
493.               goto err;
494.           /* 2^(top*BN_BITS2) - m */
495.           r->d[0] = (0 - m->d[0]) & BN_MASK2;
               ^
496.           for (i = 1; i < j; i++)
497.               r->d[i] = (~m->d[i]) & BN_MASK2;
