crypto/ec/curve448/curve448.c:428: error: INTEGER_OVERFLOW_L2
  (0 - [0, 1]):unsigned32.
Showing all 4 steps of the trace


crypto/ec/curve448/curve448.c:417:10: <RHS trace>
415.       gf_copy(z3, ONE);
416.   
417.       for (t = X_PRIVATE_BITS - 1; t >= 0; t--) {
                ^
418.           uint8_t sb = scalar[t / 8];
419.           mask_t k_t;

crypto/ec/curve448/curve448.c:417:10: Assignment
415.       gf_copy(z3, ONE);
416.   
417.       for (t = X_PRIVATE_BITS - 1; t >= 0; t--) {
                ^
418.           uint8_t sb = scalar[t / 8];
419.           mask_t k_t;

crypto/ec/curve448/curve448.c:427:9: Assignment
425.               sb = -1;
426.   
427.           k_t = (sb >> (t % 8)) & 1;
               ^
428.           k_t = 0 - k_t;             /* set to all 0s or all 1s */
429.   

crypto/ec/curve448/curve448.c:428:9: Binary operation: (0 - [0, 1]):unsigned32
426.   
427.           k_t = (sb >> (t % 8)) & 1;
428.           k_t = 0 - k_t;             /* set to all 0s or all 1s */
               ^
429.   
430.           swap ^= k_t;
