crypto/bn/bn_recp.c:204: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_usub`.
Showing all 9 steps of the trace


crypto/bn/bn_recp.c:194:10: Call
192.       if (!BN_mul(b, &(recp->N), d, ctx))
193.           goto err;
194.       if (!BN_usub(r, m, b))
                ^
195.           goto err;
196.       r->neg = 0;

crypto/bn/bn_add.c:166:1: Parameter `*r->d`
  164.   
  165.   /* unsigned subtraction of b from a, a must be larger than b. */
  166. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  167.   {
  168.       int max, min, dif;

crypto/bn/bn_recp.c:199:12: Call
197.   
198.       j = 0;
199.       while (BN_ucmp(r, &(recp->N)) >= 0) {
                  ^
200.           if (j++ > 2) {
201.               BNerr(BN_F_BN_DIV_RECP, BN_R_BAD_RECIPROCAL);

crypto/bn/bn_lib.c:581:1: Parameter `*a->d`
  579.   }
  580.   
  581. > int BN_ucmp(const BIGNUM *a, const BIGNUM *b)
  582.   {
  583.       int i;

crypto/bn/bn_recp.c:204:14: Call
202.               goto err;
203.           }
204.           if (!BN_usub(r, r, &(recp->N)))
                    ^
205.               goto err;
206.           if (!BN_add_word(d, 1))

crypto/bn/bn_add.c:166:1: <LHS trace>
164.   
165.   /* unsigned subtraction of b from a, a must be larger than b. */
166. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
167.   {
168.       int max, min, dif;

crypto/bn/bn_add.c:166:1: Parameter `*a->d`
  164.   
  165.   /* unsigned subtraction of b from a, a must be larger than b. */
  166. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  167.   {
  168.       int max, min, dif;

crypto/bn/bn_add.c:218:13: Assignment
  216.           while (dif) {
  217.               dif--;
  218.               t1 = *(ap++);
                     ^
  219.               t2 = (t1 - 1) & BN_MASK2;
  220.               *(rp++) = t2;

crypto/bn/bn_add.c:219:13: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_usub` 
  217.               dif--;
  218.               t1 = *(ap++);
  219.               t2 = (t1 - 1) & BN_MASK2;
                     ^
  220.               *(rp++) = t2;
  221.               if (t1)
