crypto/bn/bn_mul.c:183: error: INTEGER_OVERFLOW_L2
  ([0, max(4294967295, `*t`)] - [0, max(4294967295, `*t`)]):unsigned64 by call to `bn_sub_words`.
Showing all 11 steps of the trace


crypto/bn/bn_mul.c:74:1: Parameter `*t`
72.    * a[1]*b[1]
73.    */
74. > void bn_mul_recursive(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n2,
75.   	     BN_ULONG *t)
76.   	{

crypto/bn/bn_mul.c:179:11: Call
177.   	 */
178.   
179.   	c1=(int)(bn_add_words(t,r,&(r[n2]),n2));
                 ^
180.   
181.   	if (neg) /* if t[32] is negative */

crypto/bn/bn_asm.c:340:1: Parameter `*r`
  338.   	}
  339.   #else /* !BN_LLONG */
  340. > BN_ULONG bn_add_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  341.           {
  342.   	BN_ULONG c,l,t;

crypto/bn/bn_mul.c:183:13: Call
181.   	if (neg) /* if t[32] is negative */
182.   		{
183.   		c1-=(int)(bn_sub_words(&(t[n2]),t,&(t[n2]),n2));
                   ^
184.   		}
185.   	else

crypto/bn/bn_asm.c:390:1: <LHS trace>
388.   #endif /* !BN_LLONG */
389.   
390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
391.           {
392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:390:1: Parameter `*a`
  388.   #endif /* !BN_LLONG */
  389.   
  390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  391.           {
  392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:410:3: Assignment
  408.   		if (--n <= 0) break;
  409.   
  410.   		t1=a[2]; t2=b[2];
           ^
  411.   		r[2]=(t1-t2-c)&BN_MASK2;
  412.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:390:1: <RHS trace>
388.   #endif /* !BN_LLONG */
389.   
390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
391.           {
392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:390:1: Parameter `*b`
  388.   #endif /* !BN_LLONG */
  389.   
  390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  391.           {
  392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:410:12: Assignment
  408.   		if (--n <= 0) break;
  409.   
  410.   		t1=a[2]; t2=b[2];
                    ^
  411.   		r[2]=(t1-t2-c)&BN_MASK2;
  412.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:411:3: Binary operation: ([0, max(4294967295, *t)] - [0, max(4294967295, *t)]):unsigned64 by call to `bn_sub_words` 
  409.   
  410.   		t1=a[2]; t2=b[2];
  411.   		r[2]=(t1-t2-c)&BN_MASK2;
           ^
  412.   		if (t1 != t2) c=(t1 < t2);
  413.   		if (--n <= 0) break;
