test/ectest.c:89: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_mul`.
Showing all 15 steps of the trace


test/ectest.c:85:17: Call
83.               /* n2 = 1 + order */
84.               || !TEST_true(BN_add(n2, order, BN_value_one()))
85.               || !TEST_true(EC_POINT_mul(group, Q, NULL, P, n2, ctx))
                      ^
86.               || !TEST_int_eq(0, EC_POINT_cmp(group, Q, P, ctx))
87.   

crypto/ec/ec_lib.c:982:12: Call
  980.       scalars[0] = p_scalar;
  981.   
  982.       return EC_POINTs_mul(group, r, g_scalar,
                    ^
  983.                            (point != NULL
  984.                             && p_scalar != NULL), points, scalars, ctx);

crypto/ec/ec_lib.c:933:1: Parameter `ctx->stack.depth`
    931.    */
    932.   
    933. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    934.                     size_t num, const EC_POINT *points[],
    935.                     const BIGNUM *scalars[], BN_CTX *ctx)

test/ectest.c:89:17: Call
87.   
88.               /* n2 = (1 - order) * (1 + order) = 1 - order^2 */
89.               || !TEST_true(BN_mul(n2, n1, n2, ctx))
                      ^
90.               || !TEST_true(EC_POINT_mul(group, Q, NULL, P, n2, ctx))
91.               || !TEST_int_eq(0, EC_POINT_cmp(group, Q, P, ctx)))

crypto/bn/bn_mul.c:497:1: Parameter `ctx->stack.depth`
  495.   #endif                          /* BN_RECURSION */
  496.   
  497. > int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
  498.   {
  499.       int ret = bn_mul_fixed_top(r, a, b, ctx);

crypto/bn/bn_mul.c:499:15: Call
  497.   int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
  498.   {
  499.       int ret = bn_mul_fixed_top(r, a, b, ctx);
                       ^
  500.   
  501.       bn_correct_top(r);

crypto/bn/bn_mul.c:507:1: Parameter `ctx->stack.depth`
    505.   }
    506.   
    507. > int bn_mul_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
    508.   {
    509.       int ret = 0;

crypto/bn/bn_mul.c:533:5: Call
    531.       top = al + bl;
    532.   
    533.       BN_CTX_start(ctx);
               ^
    534.       if ((r == a) || (r == b)) {
    535.           if ((rr = BN_CTX_get(ctx)) == NULL)

crypto/bn/bn_ctx.c:194:1: Parameter `ctx->stack.depth`
      192.   }
      193.   
      194. > void BN_CTX_start(BN_CTX *ctx)
      195.   {
      196.       CTXDBG("ENTER BN_CTX_start()", ctx);

crypto/bn/bn_mul.c:618:5: Call
    616.    err:
    617.       bn_check_top(r);
    618.       BN_CTX_end(ctx);
               ^
    619.       return ret;
    620.   }

crypto/bn/bn_ctx.c:208:1: Parameter `ctx->stack.depth`
      206.   }
      207.   
      208. > void BN_CTX_end(BN_CTX *ctx)
      209.   {
      210.       if (ctx == NULL)

crypto/bn/bn_ctx.c:216:27: Call
      214.           ctx->err_stack--;
      215.       else {
      216.           unsigned int fp = BN_STACK_pop(&ctx->stack);
                                       ^
      217.           /* Does this stack frame have anything to release? */
      218.           if (fp < ctx->used)

crypto/bn/bn_ctx.c:298:1: <LHS trace>
296.   }
297.   
298. > static unsigned int BN_STACK_pop(BN_STACK *st)
299.   {
300.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:298:1: Parameter `st->depth`
        296.   }
        297.   
        298. > static unsigned int BN_STACK_pop(BN_STACK *st)
        299.   {
        300.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:300:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_mul` 
        298.   static unsigned int BN_STACK_pop(BN_STACK *st)
        299.   {
        300.       return st->indexes[--(st->depth)];
                          ^
        301.   }
        302.   
