crypto/jpake/jpake.c:197: error: INTEGER_OVERFLOW_L1
  (0 - 1):unsigned64 by call to `BN_rand_range`.
Showing all 10 steps of the trace


crypto/jpake/jpake.c:191:17: Call
189.       BIGNUM *r = BN_new();
190.       BIGNUM *h = BN_new();
191.       BIGNUM *t = BN_new();
                       ^
192.   
193.      /*

crypto/bn/bn_lib.c:308:2: Assignment
  306.   		}
  307.   	ret->flags=BN_FLG_MALLOCED;
  308.   	ret->top=0;
          ^
  309.   	ret->neg=0;
  310.   	ret->dmax=0;

crypto/jpake/jpake.c:197:5: Call
195.       * XXX: Java chooses r in [0, 2^160) - i.e. distribution not uniform
196.       */
197.       BN_rand_range(r, ctx->p.q);
           ^
198.      /* g^r */
199.       BN_mod_exp(p->zkpx.gr, zkpg, r, ctx->p.p, ctx->ctx);

crypto/bn/bn_rand.c:298:1: Parameter `r->top`
  296.   
  297.   
  298. > int	BN_rand_range(BIGNUM *r, const BIGNUM *range)
  299.   	{
  300.   	return bn_rand_range(0, r, range);

crypto/bn/bn_rand.c:300:9: Call
  298.   int	BN_rand_range(BIGNUM *r, const BIGNUM *range)
  299.   	{
  300.   	return bn_rand_range(0, r, range);
                 ^
  301.   	}
  302.   

crypto/bn/bn_rand.c:230:1: Parameter `r->top`
    228.   
    229.   /* random number r:  0 <= r < range */
    230. > static int bn_rand_range(int pseudo, BIGNUM *r, const BIGNUM *range)
    231.   	{
    232.   	int (*bn_rand)(BIGNUM *, size_t, int, int)

crypto/bn/bn_rand.c:290:10: Call
    288.   				}
    289.   			}
    290.   		while (BN_cmp(r, range) >= 0);
                    ^
    291.   		}
    292.   

crypto/bn/bn_lib.c:678:1: <LHS trace>
676.   	}
677.   
678. > int BN_cmp(const BIGNUM *a, const BIGNUM *b)
679.   	{
680.   	int i;

crypto/bn/bn_lib.c:678:1: Parameter `a->top`
      676.   	}
      677.   
      678. > int BN_cmp(const BIGNUM *a, const BIGNUM *b)
      679.   	{
      680.   	int i;

crypto/bn/bn_lib.c:709:7: Binary operation: (0 - 1):unsigned64 by call to `BN_rand_range` 
      707.   	if (a->top > b->top) return(gt);
      708.   	if (a->top < b->top) return(lt);
      709.   	for (i=a->top-1; i>=0; i--)
                   ^
      710.   		{
      711.   		t1=a->d[i];
