crypto/ec/ec_mult.c:306: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_consttime_swap`.
Showing all 7 steps of the trace


crypto/ec/ec_mult.c:305:16: Call
303.   
304.       for (i = cardinality_bits - 1; i >= 0; i--) {
305.           kbit = BN_is_bit_set(k, i) ^ pbit;
                      ^
306.           EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
307.           if (!EC_POINT_add(group, s, r, s, ctx))

crypto/bn/bn_lib.c:642:9: Assignment
  640.       bn_check_top(a);
  641.       if (n < 0)
  642.           return 0;
                 ^
  643.       i = n / BN_BITS2;
  644.       j = n % BN_BITS2;

crypto/ec/ec_mult.c:305:9: Assignment
303.   
304.       for (i = cardinality_bits - 1; i >= 0; i--) {
305.           kbit = BN_is_bit_set(k, i) ^ pbit;
               ^
306.           EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
307.           if (!EC_POINT_add(group, s, r, s, ctx))

crypto/ec/ec_mult.c:306:9: Call
304.       for (i = cardinality_bits - 1; i >= 0; i--) {
305.           kbit = BN_is_bit_set(k, i) ^ pbit;
306.           EC_POINT_CSWAP(kbit, r, s, group_top, Z_is_one);
               ^
307.           if (!EC_POINT_add(group, s, r, s, ctx))
308.               goto err;

crypto/bn/bn_lib.c:734:1: <LHS trace>
732.    * a and b cannot be the same number
733.    */
734. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
735.   {
736.       BN_ULONG t;

crypto/bn/bn_lib.c:734:1: Parameter `condition`
  732.    * a and b cannot be the same number
  733.    */
  734. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  735.   {
  736.       BN_ULONG t;

crypto/bn/bn_lib.c:746:5: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_consttime_swap` 
  744.       assert(sizeof(BN_ULONG) >= sizeof(int));
  745.   
  746.       condition = ((condition - 1) >> (BN_BITS2 - 1)) - 1;
             ^
  747.   
  748.       t = (a->top ^ b->top) & condition;
