crypto/dsa/dsa_ossl.c:265: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_num_bits`.
Showing all 8 steps of the trace


crypto/dsa/dsa_ossl.c:256:8: Call
254.   	if ((dsa->flags & DSA_FLAG_NO_EXP_CONSTTIME) == 0)
255.   		{
256.   		if (!BN_copy(&kq, &k)) goto err;
              ^
257.   
258.   		/* We do not want timing information to leak the length of k,

crypto/bn/bn_lib.c:497:1: Parameter `a->top`
  495.   	}
  496.   
  497. > BIGNUM *BN_copy(BIGNUM *a, const BIGNUM *b)
  498.   	{
  499.   	int i;

crypto/dsa/dsa_ossl.c:264:8: Call
262.   		 * does not let us specify the desired timing behaviour.) */
263.   
264.   		if (!BN_add(&kq, &kq, dsa->q)) goto err;
              ^
265.   		if (BN_num_bits(&kq) <= BN_num_bits(dsa->q))
266.   			{

crypto/bn/bn_add.c:64:1: Parameter `a->top`
  62.   
  63.   /* r can == a or b */
  64. > int BN_add(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  65.   	{
  66.   	const BIGNUM *tmp;

crypto/dsa/dsa_ossl.c:265:7: Call
263.   
264.   		if (!BN_add(&kq, &kq, dsa->q)) goto err;
265.   		if (BN_num_bits(&kq) <= BN_num_bits(dsa->q))
             ^
266.   			{
267.   			if (!BN_add(&kq, &kq, dsa->q)) goto err;

crypto/bn/bn_lib.c:248:1: <LHS trace>
246.   	}
247.   
248. > int BN_num_bits(const BIGNUM *a)
249.   	{
250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
  246.   	}
  247.   
  248. > int BN_num_bits(const BIGNUM *a)
  249.   	{
  250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:250:2: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_num_bits` 
  248.   int BN_num_bits(const BIGNUM *a)
  249.   	{
  250.   	int i = a->top - 1;
          ^
  251.   	bn_check_top(a);
  252.   
