crypto/ec/ec2_mult.c:333: error: INTEGER_OVERFLOW_L2
  ([0, 9223372036854775808] - 1):unsigned64 by call to `BN_consttime_swap`.
Showing all 5 steps of the trace


crypto/ec/ec2_mult.c:327:9: Assignment
325.       if (!mask) {
326.           i--;
327.           mask = BN_TBIT;
               ^
328.       }
329.   

crypto/ec/ec2_mult.c:333:13: Call
331.           word = bn_get_words(scalar)[i];
332.           while (mask) {
333.               BN_consttime_swap(word & mask, x1, x2, bn_get_top(group->field));
                   ^
334.               BN_consttime_swap(word & mask, z1, z2, bn_get_top(group->field));
335.               if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx))

crypto/bn/bn_lib.c:811:1: <LHS trace>
809.    * a and b cannot be the same number
810.    */
811. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
812.   {
813.       BN_ULONG t;

crypto/bn/bn_lib.c:811:1: Parameter `condition`
  809.    * a and b cannot be the same number
  810.    */
  811. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  812.   {
  813.       BN_ULONG t;

crypto/bn/bn_lib.c:823:5: Binary operation: ([0, 9223372036854775808] - 1):unsigned64 by call to `BN_consttime_swap` 
  821.       assert(sizeof(BN_ULONG) >= sizeof(int));
  822.   
  823.       condition = ((condition - 1) >> (BN_BITS2 - 1)) - 1;
             ^
  824.   
  825.       t = (a->top ^ b->top) & condition;
