crypto/ec/curve25519.c:4660: error: INTEGER_OVERFLOW_L2
  (32 - [1, 127]):unsigned64 by call to `SHA512_Update`.
Showing all 10 steps of the trace


crypto/ec/curve25519.c:4658:3: Call
4656.     memcpy(scopy, signature + 32, 32);
4657.   
4658.     SHA512_Init(&hash_ctx);
          ^
4659.     SHA512_Update(&hash_ctx, signature, 32);
4660.     SHA512_Update(&hash_ctx, public_key, 32);

crypto/sha/sha512.c:94:5: Assignment
  92.       c->Nl = 0;
  93.       c->Nh = 0;
  94.       c->num = 0;
            ^
  95.       c->md_len = SHA512_DIGEST_LENGTH;
  96.       return 1;

crypto/ec/curve25519.c:4659:3: Call
4657.   
4658.     SHA512_Init(&hash_ctx);
4659.     SHA512_Update(&hash_ctx, signature, 32);
          ^
4660.     SHA512_Update(&hash_ctx, public_key, 32);
4661.     SHA512_Update(&hash_ctx, message, message_len);

crypto/sha/sha512.c:188:1: Parameter `c->num`
  186.   }
  187.   
  188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  189.   {
  190.       SHA_LONG64 l;

crypto/ec/curve25519.c:4660:3: Call
4658.     SHA512_Init(&hash_ctx);
4659.     SHA512_Update(&hash_ctx, signature, 32);
4660.     SHA512_Update(&hash_ctx, public_key, 32);
          ^
4661.     SHA512_Update(&hash_ctx, message, message_len);
4662.     SHA512_Final(h, &hash_ctx);

crypto/sha/sha512.c:188:1: <LHS trace>
186.   }
187.   
188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
189.   {
190.       SHA_LONG64 l;

crypto/sha/sha512.c:188:1: Parameter `len`
  186.   }
  187.   
  188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  189.   {
  190.       SHA_LONG64 l;

crypto/sha/sha512.c:188:1: <RHS trace>
186.   }
187.   
188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
189.   {
190.       SHA_LONG64 l;

crypto/sha/sha512.c:188:1: Parameter `len`
  186.   }
  187.   
  188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  189.   {
  190.       SHA_LONG64 l;

crypto/sha/sha512.c:212:13: Binary operation: (32 - [1, 127]):unsigned64 by call to `SHA512_Update` 
  210.           } else {
  211.               memcpy(p + c->num, data, n), c->num = 0;
  212.               len -= n, data += n;
                     ^
  213.               sha512_block_data_order(c, p, 1);
  214.           }
