crypto/x509v3/v3_utl.c:149: error: BUFFER_OVERRUN_L3
  Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [2, +oo] by call to `BN_dec2bn`.
Showing all 12 steps of the trace


crypto/x509v3/v3_utl.c:144:7: Call
142.   	BIGNUM *bn = NULL;
143.   	ASN1_INTEGER *aint;
144.   	bn = BN_new();
             ^
145.   	if(!value) {
146.   		X509V3err(X509V3_F_S2I_ASN1_INTEGER,X509V3_R_INVALID_NULL_VALUE);

crypto/bn/bn_lib.c:300:2: Assignment
  298.   		}
  299.   	ret->flags=BN_FLG_MALLOCED;
  300.   	ret->top=0;
          ^
  301.   	ret->neg=0;
  302.   	ret->max=0;

crypto/x509v3/v3_utl.c:149:6: Call
147.   		return 0;
148.   	}
149.   	if(!BN_dec2bn(&bn, value)) {
            ^
150.   		X509V3err(X509V3_F_S2I_ASN1_INTEGER,X509V3_R_BN_DEC2BN_ERROR);
151.   		return 0;

crypto/bn/bn_print.c:223:1: Parameter `(*bn)->top`
  221.   	}
  222.   
  223. > int BN_dec2bn(BIGNUM **bn, char *a)
  224.   	{
  225.   	BIGNUM *ret=NULL;

crypto/bn/bn_print.c:264:4: Call
  262.   		if (++j == BN_DEC_NUM)
  263.   			{
  264.   			BN_mul_word(ret,BN_DEC_CONV);
            ^
  265.   			BN_add_word(ret,l);
  266.   			l=0;

crypto/bn/bn_word.c:178:1: Parameter `a->max`
    176.   	}
    177.   
    178. > int BN_mul_word(BIGNUM *a, BN_ULONG w)
    179.   	{
    180.   	BN_ULONG ll;

crypto/bn/bn_word.c:188:8: Call
    186.   		if (ll)
    187.   			{
    188.   			if (bn_wexpand(a,a->top+1) == NULL) return(0);
                  ^
    189.   			a->d[a->top++]=ll;
    190.   			}

crypto/bn/bn_lib.c:344:1: <Length trace>
342.   	}
343.   
344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
345.   	{
346.   	BN_ULONG *A,*B,*a;

crypto/bn/bn_lib.c:344:1: Parameter `words`
      342.   	}
      343.   
      344. > BIGNUM *bn_expand2(BIGNUM *b, int words)
      345.   	{
      346.   	BN_ULONG *A,*B,*a;

crypto/bn/bn_lib.c:359:19: Array declaration
      357.   			return(NULL);
      358.   			}
      359.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
                               ^
      360.   		if (A == NULL)
      361.   			{

crypto/bn/bn_lib.c:359:5: Assignment
      357.   			return(NULL);
      358.   			}
      359.   		a=A=(BN_ULONG *)Malloc(sizeof(BN_ULONG)*(words+1));
                 ^
      360.   		if (A == NULL)
      361.   			{

crypto/bn/bn_lib.c:377:38: Array access: Offset: [7, +oo] (⇐ [0, +oo] + 7) Size: [2, +oo] by call to `BN_dec2bn` 
      375.   				{
      376.   				A[0]=B[0]; A[1]=B[1]; A[2]=B[2]; A[3]=B[3];
      377.   				A[4]=B[4]; A[5]=B[5]; A[6]=B[6]; A[7]=B[7];
                                                  ^
      378.   				A+=8;
      379.   				B+=8;
