crypto/bn/bn_mont.c:481: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_lshift`.
Showing all 6 steps of the trace


crypto/bn/bn_mont.c:479:8: Call
477.   		tmod.top = buf[0] != 0 ? 1 : 0;
478.   							/* Ri = R^-1 mod N*/
479.   		if ((BN_mod_inverse(Ri,R,&tmod,ctx)) == NULL)
              ^
480.   			goto err;
481.   		if (!BN_lshift(Ri,Ri,BN_BITS2)) goto err; /* R*Ri */

crypto/bn/bn_gcd.c:208:1: Parameter `in->top`
  206.   static BIGNUM *BN_mod_inverse_no_branch(BIGNUM *in,
  207.           const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx);
  208. > BIGNUM *BN_mod_inverse(BIGNUM *in,
  209.   	const BIGNUM *a, const BIGNUM *n, BN_CTX *ctx)
  210.   	{

crypto/bn/bn_mont.c:481:8: Call
479.   		if ((BN_mod_inverse(Ri,R,&tmod,ctx)) == NULL)
480.   			goto err;
481.   		if (!BN_lshift(Ri,Ri,BN_BITS2)) goto err; /* R*Ri */
              ^
482.   		if (!BN_is_zero(Ri))
483.   			{

crypto/bn/bn_shift.c:132:1: <LHS trace>
130.   	}
131.   
132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
133.   	{
134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:132:1: Parameter `a->top`
  130.   	}
  131.   
  132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
  133.   	{
  134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:150:8: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_lshift` 
  148.   	t[a->top+nw]=0;
  149.   	if (lb == 0)
  150.   		for (i=a->top-1; i>=0; i--)
                ^
  151.   			t[nw+i]=f[i];
  152.   	else
