crypto/bn/bntest.c:1448: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_GF2m_mod_exp`.
Showing all 9 steps of the trace


crypto/bn/bntest.c:1445:3: Call
1443.   		BN_bntest_rand(a, 512, 0, 0);
1444.   		BN_bntest_rand(c, 512, 0, 0);
1445.   		BN_bntest_rand(d, 512, 0, 0);
          ^
1446.   		for (j=0; j < 2; j++)
1447.   			{

crypto/bn/bn_rand.c:224:9: Call
  222.   int     BN_bntest_rand(BIGNUM *rnd, size_t bits, int top, int bottom)
  223.   	{
  224.   	return bnrand(2, rnd, bits, top, bottom);
                 ^
  225.   	}
  226.   #endif

crypto/bn/bn_rand.c:118:1: Parameter `rnd->top`
    116.   #include <openssl/rand.h>
    117.   
    118. > static int bnrand(int pseudorand, BIGNUM *rnd, int bits, int top, int bottom)
    119.   	{
    120.   	unsigned char *buf=NULL;

crypto/bn/bntest.c:1448:4: Call
1446.   		for (j=0; j < 2; j++)
1447.   			{
1448.   			BN_GF2m_mod_exp(e, a, c, b[j], ctx);
           ^
1449.   			BN_GF2m_mod_exp(f, a, d, b[j], ctx);
1450.   			BN_GF2m_mod_mul(e, e, f, b[j], ctx);

crypto/bn/bn_gf2m.c:777:1: Parameter `p->top`
  775.    * BN_GF2m_mod_exp_arr function.
  776.    */
  777. > int BN_GF2m_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *p, BN_CTX *ctx)
  778.   	{
  779.   	int ret = 0;

crypto/bn/bn_gf2m.c:780:18: Call
  778.   	{
  779.   	int ret = 0;
  780.   	const int max = BN_num_bits(p) + 1;
                          ^
  781.   	int *arr=NULL;
  782.   	bn_check_top(a);

crypto/bn/bn_lib.c:248:1: <LHS trace>
246.   	}
247.   
248. > int BN_num_bits(const BIGNUM *a)
249.   	{
250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
    246.   	}
    247.   
    248. > int BN_num_bits(const BIGNUM *a)
    249.   	{
    250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:250:2: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_GF2m_mod_exp` 
    248.   int BN_num_bits(const BIGNUM *a)
    249.   	{
    250.   	int i = a->top - 1;
            ^
    251.   	bn_check_top(a);
    252.   
