crypto/ec/curve25519.c:4662: error: INTEGER_OVERFLOW_L2
  (128 - [113, 380]):unsigned64 by call to `SHA512_Final`.
Showing all 14 steps of the trace


crypto/ec/curve25519.c:4658:3: Call
4656.     memcpy(scopy, signature + 32, 32);
4657.   
4658.     SHA512_Init(&hash_ctx);
          ^
4659.     SHA512_Update(&hash_ctx, signature, 32);
4660.     SHA512_Update(&hash_ctx, public_key, 32);

crypto/sha/sha512.c:94:5: Assignment
  92.       c->Nl = 0;
  93.       c->Nh = 0;
  94.       c->num = 0;
            ^
  95.       c->md_len = SHA512_DIGEST_LENGTH;
  96.       return 1;

crypto/ec/curve25519.c:4659:3: Call
4657.   
4658.     SHA512_Init(&hash_ctx);
4659.     SHA512_Update(&hash_ctx, signature, 32);
          ^
4660.     SHA512_Update(&hash_ctx, public_key, 32);
4661.     SHA512_Update(&hash_ctx, message, message_len);

crypto/sha/sha512.c:188:1: Parameter `c->num`
  186.   }
  187.   
  188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  189.   {
  190.       SHA_LONG64 l;

crypto/ec/curve25519.c:4660:3: Call
4658.     SHA512_Init(&hash_ctx);
4659.     SHA512_Update(&hash_ctx, signature, 32);
4660.     SHA512_Update(&hash_ctx, public_key, 32);
          ^
4661.     SHA512_Update(&hash_ctx, message, message_len);
4662.     SHA512_Final(h, &hash_ctx);

crypto/sha/sha512.c:188:1: Parameter `c->num`
  186.   }
  187.   
  188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  189.   {
  190.       SHA_LONG64 l;

crypto/ec/curve25519.c:4661:3: Call
4659.     SHA512_Update(&hash_ctx, signature, 32);
4660.     SHA512_Update(&hash_ctx, public_key, 32);
4661.     SHA512_Update(&hash_ctx, message, message_len);
          ^
4662.     SHA512_Final(h, &hash_ctx);
4663.   

crypto/sha/sha512.c:188:1: Parameter `c->num`
  186.   }
  187.   
  188. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  189.   {
  190.       SHA_LONG64 l;

crypto/ec/curve25519.c:4662:3: Call
4660.     SHA512_Update(&hash_ctx, public_key, 32);
4661.     SHA512_Update(&hash_ctx, message, message_len);
4662.     SHA512_Final(h, &hash_ctx);
          ^
4663.   
4664.     x25519_sc_reduce(h);

crypto/sha/sha512.c:104:1: <RHS trace>
102.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
103.   
104. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
105.   {
106.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:104:1: Parameter `c->num`
  102.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
  103.   
  104. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
  105.   {
  106.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:107:5: Assignment
  105.   {
  106.       unsigned char *p = (unsigned char *)c->u.p;
  107.       size_t n = c->num;
             ^
  108.   
  109.       p[n] = 0x80;                /* There always is a room for one */

crypto/sha/sha512.c:110:5: Assignment
  108.   
  109.       p[n] = 0x80;                /* There always is a room for one */
  110.       n++;
             ^
  111.       if (n > (sizeof(c->u) - 16)) {
  112.           memset(p + n, 0, sizeof(c->u) - n);

crypto/sha/sha512.c:112:9: Binary operation: (128 - [113, 380]):unsigned64 by call to `SHA512_Final` 
  110.       n++;
  111.       if (n > (sizeof(c->u) - 16)) {
  112.           memset(p + n, 0, sizeof(c->u) - n);
                 ^
  113.           n = 0;
  114.           sha512_block_data_order(c, p, 1);
