crypto/bn/bn_gf2m.c:834: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_GF2m_mod_sqrt_arr`.
Showing all 6 steps of the trace


crypto/bn/bn_gf2m.c:829:6: Call
827.   	unsigned int *arr=NULL, ret = 0;
828.   	if ((arr = (unsigned int *)OPENSSL_malloc(sizeof(unsigned int) * max)) == NULL) goto err;
829.   	if (BN_GF2m_poly2arr(p, arr, max) > max)
            ^
830.   		{
831.   		BNerr(BN_F_BN_GF2M_MOD_EXP,BN_R_INVALID_LENGTH);

crypto/bn/bn_gf2m.c:943:1: Parameter `*p`
  941.    * number of coefficients that would be extracted if array was large enough.
  942.    */
  943. > int BN_GF2m_poly2arr(const BIGNUM *a, unsigned int p[], int max)
  944.   	{
  945.   	int i, j, k;

crypto/bn/bn_gf2m.c:834:8: Call
832.   		goto err;
833.   		}
834.   	ret = BN_GF2m_mod_sqrt_arr(r, a, arr, ctx);
              ^
835.     err:
836.   	if (arr) OPENSSL_free(arr);

crypto/bn/bn_gf2m.c:800:1: <LHS trace>
798.    * Uses exponentiation as in algorithm A.4.1 from IEEE P1363.
799.    */
800. > int	BN_GF2m_mod_sqrt_arr(BIGNUM *r, const BIGNUM *a, const unsigned int p[], BN_CTX *ctx)
801.   	{
802.   	int ret = 0;

crypto/bn/bn_gf2m.c:800:1: Parameter `*p`
  798.    * Uses exponentiation as in algorithm A.4.1 from IEEE P1363.
  799.    */
  800. > int	BN_GF2m_mod_sqrt_arr(BIGNUM *r, const BIGNUM *a, const unsigned int p[], BN_CTX *ctx)
  801.   	{
  802.   	int ret = 0;

crypto/bn/bn_gf2m.c:809:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_GF2m_mod_sqrt_arr` 
  807.   	
  808.   	if (!BN_zero(u)) goto err;
  809.   	if (!BN_set_bit(u, p[0] - 1)) goto err;
               ^
  810.   	ret = BN_GF2m_mod_exp_arr(r, a, u, p, ctx);
  811.   
