crypto/bn/bn_mul.c:458: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, max(4294967295, `*t`)]):unsigned64 by call to `bn_sub_words`.
Showing all 15 steps of the trace


crypto/bn/bn_mul.c:430:3: Call
428.   	if (n == 8)
429.   		{
430.   		bn_mul_comba8(&(t[0]),&(r[0]),&(r[n]));
         ^
431.   		bn_mul_comba8(r,&(a[n]),&(b[n]));
432.   		}

crypto/bn/bn_asm.c:489:1: Parameter `*b`
  487.   #endif
  488.   
  489. > void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
  490.   	{
  491.   #ifdef BN_LLONG

crypto/bn/bn_asm.c:593:2: Assignment
  591.   	r[13]=c2;
  592.   	c2=0;
  593.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  594.   	r[14]=c3;
  595.   	r[15]=c1;

crypto/bn/bn_asm.c:593:2: Assignment
  591.   	r[13]=c2;
  592.   	c2=0;
  593.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  594.   	r[14]=c3;
  595.   	r[15]=c1;

crypto/bn/bn_asm.c:593:2: Assignment
  591.   	r[13]=c2;
  592.   	c2=0;
  593.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  594.   	r[14]=c3;
  595.   	r[15]=c1;

crypto/bn/bn_asm.c:593:2: Assignment
  591.   	r[13]=c2;
  592.   	c2=0;
  593.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  594.   	r[14]=c3;
  595.   	r[15]=c1;

crypto/bn/bn_asm.c:595:2: Assignment
  593.   	mul_add_c(a[7],b[7],c3,c1,c2);
  594.   	r[14]=c3;
  595.   	r[15]=c1;
          ^
  596.   	}
  597.   

crypto/bn/bn_mul.c:458:13: Call
456.   
457.   	if (neg)
458.   		neg=(int)(bn_sub_words(&(t[n2]),lp,&(t[0]),n));
                   ^
459.   	else
460.   		{

crypto/bn/bn_asm.c:389:1: <LHS trace>
387.   #endif
388.   
389. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
390.           {
391.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:389:1: Parameter `*a`
  387.   #endif
  388.   
  389. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  390.           {
  391.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:399:3: Assignment
  397.   	for (;;)
  398.   		{
  399.   		t1=a[0]; t2=b[0];
           ^
  400.   		r[0]=(t1-t2-c)&BN_MASK2;
  401.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:389:1: <RHS trace>
387.   #endif
388.   
389. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
390.           {
391.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:389:1: Parameter `*b`
  387.   #endif
  388.   
  389. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  390.           {
  391.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:399:12: Assignment
  397.   	for (;;)
  398.   		{
  399.   		t1=a[0]; t2=b[0];
                    ^
  400.   		r[0]=(t1-t2-c)&BN_MASK2;
  401.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:400:3: Binary operation: ([0, +oo] - [0, max(4294967295, *t)]):unsigned64 by call to `bn_sub_words` 
  398.   		{
  399.   		t1=a[0]; t2=b[0];
  400.   		r[0]=(t1-t2-c)&BN_MASK2;
           ^
  401.   		if (t1 != t2) c=(t1 < t2);
  402.   		if (--n <= 0) break;
