crypto/bn/bn_nist.c:513: error: INTEGER_OVERFLOW_L2
  (0 - [0, 2]):unsigned64.
Showing all 5 steps of the trace


crypto/bn/bn_nist.c:512:16: <RHS trace>
510.   		 * to be compared to the modulus and conditionally
511.   		 * adjusted by *subtracting* the latter. */
512.   		carry = (int)bn_add_words(r_d,r_d,_nist_p_224[-carry-1],BN_NIST_224_TOP);
                      ^
513.   		mask = 0-(size_t)carry;
514.   		u.p = ((size_t)bn_sub_words&mask) | ((size_t)bn_add_words&~mask);

crypto/bn/bn_nist.c:512:16: Call
510.   		 * to be compared to the modulus and conditionally
511.   		 * adjusted by *subtracting* the latter. */
512.   		carry = (int)bn_add_words(r_d,r_d,_nist_p_224[-carry-1],BN_NIST_224_TOP);
                      ^
513.   		mask = 0-(size_t)carry;
514.   		u.p = ((size_t)bn_sub_words&mask) | ((size_t)bn_add_words&~mask);

crypto/bn/bn_asm.c:346:14: Assignment
  344.   
  345.   	assert(n >= 0);
  346.   	if (n <= 0) return((BN_ULONG)0);
                      ^
  347.   
  348.   	c=0;

crypto/bn/bn_nist.c:512:3: Assignment
510.   		 * to be compared to the modulus and conditionally
511.   		 * adjusted by *subtracting* the latter. */
512.   		carry = (int)bn_add_words(r_d,r_d,_nist_p_224[-carry-1],BN_NIST_224_TOP);
         ^
513.   		mask = 0-(size_t)carry;
514.   		u.p = ((size_t)bn_sub_words&mask) | ((size_t)bn_add_words&~mask);

crypto/bn/bn_nist.c:513:3: Binary operation: (0 - [0, 2]):unsigned64
511.   		 * adjusted by *subtracting* the latter. */
512.   		carry = (int)bn_add_words(r_d,r_d,_nist_p_224[-carry-1],BN_NIST_224_TOP);
513.   		mask = 0-(size_t)carry;
         ^
514.   		u.p = ((size_t)bn_sub_words&mask) | ((size_t)bn_add_words&~mask);
515.   		}
