crypto/bn/bn_mul.c:829: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, max(4294967295, `*t`)]):unsigned64 by call to `bn_sub_words`.
Showing all 15 steps of the trace


crypto/bn/bn_mul.c:801:3: Call
799.   	if (n == 8)
800.   		{
801.   		bn_mul_comba8(&(t[0]),&(r[0]),&(r[n]));
         ^
802.   		bn_mul_comba8(r,&(a[n]),&(b[n]));
803.   		}

crypto/bn/bn_asm.c:522:1: Parameter `*b`
  520.   #endif /* !BN_LLONG */
  521.   
  522. > void bn_mul_comba8(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b)
  523.   	{
  524.   #ifdef BN_LLONG

crypto/bn/bn_asm.c:626:2: Assignment
  624.   	r[13]=c2;
  625.   	c2=0;
  626.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  627.   	r[14]=c3;
  628.   	r[15]=c1;

crypto/bn/bn_asm.c:626:2: Assignment
  624.   	r[13]=c2;
  625.   	c2=0;
  626.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  627.   	r[14]=c3;
  628.   	r[15]=c1;

crypto/bn/bn_asm.c:626:2: Assignment
  624.   	r[13]=c2;
  625.   	c2=0;
  626.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  627.   	r[14]=c3;
  628.   	r[15]=c1;

crypto/bn/bn_asm.c:626:2: Assignment
  624.   	r[13]=c2;
  625.   	c2=0;
  626.   	mul_add_c(a[7],b[7],c3,c1,c2);
          ^
  627.   	r[14]=c3;
  628.   	r[15]=c1;

crypto/bn/bn_asm.c:628:2: Assignment
  626.   	mul_add_c(a[7],b[7],c3,c1,c2);
  627.   	r[14]=c3;
  628.   	r[15]=c1;
          ^
  629.   	}
  630.   

crypto/bn/bn_mul.c:829:13: Call
827.   
828.   	if (neg)
829.   		neg=(int)(bn_sub_words(&(t[n2]),lp,&(t[0]),n));
                   ^
830.   	else
831.   		{

crypto/bn/bn_asm.c:385:1: <LHS trace>
383.   #endif /* !BN_LLONG */
384.   
385. > BN_ULONG bn_sub_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b, int n)
386.           {
387.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:385:1: Parameter `*a`
  383.   #endif /* !BN_LLONG */
  384.   
  385. > BN_ULONG bn_sub_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b, int n)
  386.           {
  387.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:395:3: Assignment
  393.   	for (;;)
  394.   		{
  395.   		t1=a[0]; t2=b[0];
           ^
  396.   		r[0]=(t1-t2-c)&BN_MASK2;
  397.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:385:1: <RHS trace>
383.   #endif /* !BN_LLONG */
384.   
385. > BN_ULONG bn_sub_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b, int n)
386.           {
387.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:385:1: Parameter `*b`
  383.   #endif /* !BN_LLONG */
  384.   
  385. > BN_ULONG bn_sub_words(BN_ULONG *r, const BN_ULONG *a, const BN_ULONG *b, int n)
  386.           {
  387.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:395:12: Assignment
  393.   	for (;;)
  394.   		{
  395.   		t1=a[0]; t2=b[0];
                    ^
  396.   		r[0]=(t1-t2-c)&BN_MASK2;
  397.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:396:3: Binary operation: ([0, +oo] - [0, max(4294967295, *t)]):unsigned64 by call to `bn_sub_words` 
  394.   		{
  395.   		t1=a[0]; t2=b[0];
  396.   		r[0]=(t1-t2-c)&BN_MASK2;
           ^
  397.   		if (t1 != t2) c=(t1 < t2);
  398.   		if (--n <= 0) break;
