crypto/bn/bn_rand.c:249: error: INTEGER_OVERFLOW_L2
  (128 - [113, 506]):unsigned64 by call to `SHA512_Final`.
Showing all 16 steps of the trace


crypto/bn/bn_rand.c:244:9: Call
242.           if (RAND_priv_bytes(random_bytes, sizeof(random_bytes)) != 1)
243.               goto err;
244.           SHA512_Init(&sha);
               ^
245.           SHA512_Update(&sha, &done, sizeof(done));
246.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));

crypto/sha/sha512.c:130:5: Assignment
  128.       c->Nl = 0;
  129.       c->Nh = 0;
  130.       c->num = 0;
             ^
  131.       c->md_len = SHA512_DIGEST_LENGTH;
  132.       return 1;

crypto/bn/bn_rand.c:245:9: Call
243.               goto err;
244.           SHA512_Init(&sha);
245.           SHA512_Update(&sha, &done, sizeof(done));
               ^
246.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
247.           SHA512_Update(&sha, message, message_len);

crypto/sha/sha512.c:264:1: Parameter `c->num`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/bn/bn_rand.c:246:9: Call
244.           SHA512_Init(&sha);
245.           SHA512_Update(&sha, &done, sizeof(done));
246.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
               ^
247.           SHA512_Update(&sha, message, message_len);
248.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));

crypto/sha/sha512.c:264:1: Parameter `c->num`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/bn/bn_rand.c:247:9: Call
245.           SHA512_Update(&sha, &done, sizeof(done));
246.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
247.           SHA512_Update(&sha, message, message_len);
               ^
248.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
249.           SHA512_Final(digest, &sha);

crypto/sha/sha512.c:264:1: Parameter `c->num`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/bn/bn_rand.c:248:9: Call
246.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
247.           SHA512_Update(&sha, message, message_len);
248.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
               ^
249.           SHA512_Final(digest, &sha);
250.   

crypto/sha/sha512.c:264:1: Parameter `c->num`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/bn/bn_rand.c:249:9: Call
247.           SHA512_Update(&sha, message, message_len);
248.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
249.           SHA512_Final(digest, &sha);
               ^
250.   
251.           todo = num_k_bytes - done;

crypto/sha/sha512.c:140:1: <RHS trace>
138.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
139.   
140. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
141.   {
142.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:140:1: Parameter `c->num`
  138.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
  139.   
  140. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
  141.   {
  142.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:143:5: Assignment
  141.   {
  142.       unsigned char *p = (unsigned char *)c->u.p;
  143.       size_t n = c->num;
             ^
  144.   
  145.       p[n] = 0x80;                /* There always is a room for one */

crypto/sha/sha512.c:146:5: Assignment
  144.   
  145.       p[n] = 0x80;                /* There always is a room for one */
  146.       n++;
             ^
  147.       if (n > (sizeof(c->u) - 16)) {
  148.           memset(p + n, 0, sizeof(c->u) - n);

crypto/sha/sha512.c:148:9: Binary operation: (128 - [113, 506]):unsigned64 by call to `SHA512_Final` 
  146.       n++;
  147.       if (n > (sizeof(c->u) - 16)) {
  148.           memset(p + n, 0, sizeof(c->u) - n);
                 ^
  149.           n = 0;
  150.           sha512_block_data_order(c, p, 1);
