crypto/bn/bn_gf2m.c:902: error: INTEGER_OVERFLOW_L2
  ([0, `*p`] - 1):unsigned32.
Showing all 3 steps of the trace


crypto/bn/bn_gf2m.c:874:1: <LHS trace>
872.    * Uses algorithms A.4.7 and A.4.6 from IEEE P1363.
873.    */
874. > int BN_GF2m_mod_solve_quad_arr(BIGNUM *r, const BIGNUM *a_, const unsigned int p[], BN_CTX *ctx)
875.   	{
876.   	int ret = 0, count = 0;

crypto/bn/bn_gf2m.c:874:1: Parameter `*p`
872.    * Uses algorithms A.4.7 and A.4.6 from IEEE P1363.
873.    */
874. > int BN_GF2m_mod_solve_quad_arr(BIGNUM *r, const BIGNUM *a_, const unsigned int p[], BN_CTX *ctx)
875.   	{
876.   	int ret = 0, count = 0;

crypto/bn/bn_gf2m.c:902:15: Binary operation: ([0, *p] - 1):unsigned32
900.   		/* compute half-trace of a */
901.   		if (!BN_copy(z, a)) goto err;
902.   		for (j = 1; j <= (p[0] - 1) / 2; j++)
                     ^
903.   			{
904.   			if (!BN_GF2m_mod_sqr_arr(z, z, p, ctx)) goto err;
