crypto/bn/bn_recp.c:123: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_div_recp`.
Showing all 14 steps of the trace


crypto/bn/bn_recp.c:115:11: Call
113.   		{
114.   		if (x == y)
115.   			{ if (!BN_sqr(a,x,ctx)) goto err; }
                 ^
116.   		else
117.   			{ if (!BN_mul(a,x,y,ctx)) goto err; }

crypto/bn/bn_sqr.c:65:1: Parameter `ctx->pool.used`
  63.   /* r must not be a */
  64.   /* I've just gone over this and it is now %20 faster on x86 - eay - 27 Jun 96 */
  65. > int BN_sqr(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx)
  66.   	{
  67.   	int max,al;

crypto/bn/bn_recp.c:123:8: Call
121.   		ca=x; /* Just do the mod */
122.   
123.   	ret = BN_div_recp(NULL,r,ca,recp,ctx);
              ^
124.   err:
125.   	BN_CTX_end(ctx);

crypto/bn/bn_recp.c:130:1: Parameter `ctx->pool.used`
  128.   	}
  129.   
  130. > int BN_div_recp(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m,
  131.   	BN_RECP_CTX *recp, BN_CTX *ctx)
  132.   	{

crypto/bn/bn_recp.c:137:4: Call
  135.   
  136.   	BN_CTX_start(ctx);
  137.   	a=BN_CTX_get(ctx);
            ^
  138.   	b=BN_CTX_get(ctx);
  139.   	if (dv != NULL)

crypto/bn/bn_ctx.c:288:1: Parameter `ctx->pool.used`
    286.   	}
    287.   
    288. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    289.   	{
    290.   	BIGNUM *ret;

crypto/bn/bn_recp.c:138:4: Call
  136.   	BN_CTX_start(ctx);
  137.   	a=BN_CTX_get(ctx);
  138.   	b=BN_CTX_get(ctx);
            ^
  139.   	if (dv != NULL)
  140.   		d=dv;

crypto/bn/bn_ctx.c:288:1: Parameter `ctx->pool.used`
    286.   	}
    287.   
    288. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    289.   	{
    290.   	BIGNUM *ret;

crypto/bn/bn_recp.c:153:3: Call
  151.   		BN_zero(d);
  152.   		if (!BN_copy(r,m)) return 0;
  153.   		BN_CTX_end(ctx);
           ^
  154.   		return(1);
  155.   		}

crypto/bn/bn_ctx.c:270:1: Parameter `ctx->pool.used`
    268.   	}
    269.   
    270. > void BN_CTX_end(BN_CTX *ctx)
    271.   	{
    272.   	CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:280:4: Call
    278.   		/* Does this stack frame have anything to release? */
    279.   		if(fp < ctx->used)
    280.   			BN_POOL_release(&ctx->pool, ctx->used - fp);
              ^
    281.   		ctx->used = fp;
    282.   		/* Unjam "too_many" in case "get" had failed */

crypto/bn/bn_ctx.c:438:1: <LHS trace>
436.   	}
437.   
438. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
439.   	{
440.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:438:1: Parameter `p->used`
      436.   	}
      437.   
      438. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
      439.   	{
      440.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:440:2: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_div_recp` 
      438.   static void BN_POOL_release(BN_POOL *p, unsigned int num)
      439.   	{
      440.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;
              ^
      441.   	p->used -= num;
      442.   	while(num--)
