crypto/ec/ec2_mult.c:285: error: INTEGER_OVERFLOW_L2
  ([0, 9223372036854775808] - 1):unsigned64 by call to `BN_consttime_swap`.
Showing all 5 steps of the trace


crypto/ec/ec2_mult.c:277:3: Assignment
275.   		{
276.   		i--;
277.   		mask = BN_TBIT;
         ^
278.   		}
279.   

crypto/ec/ec2_mult.c:285:4: Call
283.   		while (mask)
284.   			{
285.   			BN_consttime_swap(word & mask, x1, x2, bn_get_top(group->field));
          ^
286.   			BN_consttime_swap(word & mask, z1, z2, bn_get_top(group->field));
287.   			if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx)) goto err;

crypto/bn/bn_lib.c:788:1: <LHS trace>
786.    * a and b cannot be the same number
787.    */
788. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
789.   	{
790.   	BN_ULONG t;

crypto/bn/bn_lib.c:788:1: Parameter `condition`
  786.    * a and b cannot be the same number
  787.    */
  788. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  789.   	{
  790.   	BN_ULONG t;

crypto/bn/bn_lib.c:800:2: Binary operation: ([0, 9223372036854775808] - 1):unsigned64 by call to `BN_consttime_swap` 
  798.   	assert(sizeof(BN_ULONG) >= sizeof(int));
  799.   
  800.   	condition = ((condition - 1) >> (BN_BITS2 - 1)) - 1;
          ^
  801.   
  802.   	t = (a->top^b->top) & condition;
