crypto/bn/bn_sqr.c:260: error: INTEGER_OVERFLOW_L2
  ([0, max(4294967295, `*t`)] - [0, max(4294967295, `*t`)]):unsigned64 by call to `bn_sub_words`.
Showing all 11 steps of the trace


crypto/bn/bn_sqr.c:200:1: Parameter `*t`
198.    * a[1]*b[1]
199.    */
200. > void bn_sqr_recursive(BN_ULONG *r, BN_ULONG *a, int n2, BN_ULONG *t)
201.   	{
202.   	int n=n2/2;

crypto/bn/bn_sqr.c:257:11: Call
255.   	 */
256.   
257.   	c1=(int)(bn_add_words(t,r,&(r[n2]),n2));
                 ^
258.   
259.   	/* t[32] is negative */

crypto/bn/bn_asm.c:340:1: Parameter `*r`
  338.   	}
  339.   #else /* !BN_LLONG */
  340. > BN_ULONG bn_add_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  341.           {
  342.   	BN_ULONG c,l,t;

crypto/bn/bn_sqr.c:260:12: Call
258.   
259.   	/* t[32] is negative */
260.   	c1-=(int)(bn_sub_words(&(t[n2]),t,&(t[n2]),n2));
                  ^
261.   
262.   	/* t[32] holds (a[0]-a[1])*(a[1]-a[0])+(a[0]*a[0])+(a[1]*a[1])

crypto/bn/bn_asm.c:390:1: <LHS trace>
388.   #endif /* !BN_LLONG */
389.   
390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
391.           {
392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:390:1: Parameter `*a`
  388.   #endif /* !BN_LLONG */
  389.   
  390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  391.           {
  392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:400:3: Assignment
  398.   	for (;;)
  399.   		{
  400.   		t1=a[0]; t2=b[0];
           ^
  401.   		r[0]=(t1-t2-c)&BN_MASK2;
  402.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:390:1: <RHS trace>
388.   #endif /* !BN_LLONG */
389.   
390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
391.           {
392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:390:1: Parameter `*b`
  388.   #endif /* !BN_LLONG */
  389.   
  390. > BN_ULONG bn_sub_words(BN_ULONG *r, BN_ULONG *a, BN_ULONG *b, int n)
  391.           {
  392.   	BN_ULONG t1,t2;

crypto/bn/bn_asm.c:400:12: Assignment
  398.   	for (;;)
  399.   		{
  400.   		t1=a[0]; t2=b[0];
                    ^
  401.   		r[0]=(t1-t2-c)&BN_MASK2;
  402.   		if (t1 != t2) c=(t1 < t2);

crypto/bn/bn_asm.c:401:3: Binary operation: ([0, max(4294967295, *t)] - [0, max(4294967295, *t)]):unsigned64 by call to `bn_sub_words` 
  399.   		{
  400.   		t1=a[0]; t2=b[0];
  401.   		r[0]=(t1-t2-c)&BN_MASK2;
           ^
  402.   		if (t1 != t2) c=(t1 < t2);
  403.   		if (--n <= 0) break;
