crypto/ec/ec2_mult.c:284: error: INTEGER_OVERFLOW_L2
  ([0, min(9223372036854775808, `*scalar->d`)] - 1):unsigned64 by call to `BN_consttime_swap`.
Showing all 5 steps of the trace


crypto/ec/ec2_mult.c:276:3: Assignment
274.   		{
275.   		i--;
276.   		mask = BN_TBIT;
         ^
277.   		}
278.   

crypto/ec/ec2_mult.c:284:4: Call
282.   		while (mask)
283.   			{
284.   			BN_consttime_swap(word & mask, x1, x2, group->field.top);
          ^
285.   			BN_consttime_swap(word & mask, z1, z2, group->field.top);
286.   			if (!gf2m_Madd(group, &point->X, x2, z2, x1, z1, ctx)) goto err;

crypto/bn/bn_lib.c:839:1: <LHS trace>
837.    * a and b cannot be the same number
838.    */
839. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
840.   	{
841.   	BN_ULONG t;

crypto/bn/bn_lib.c:839:1: Parameter `condition`
  837.    * a and b cannot be the same number
  838.    */
  839. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  840.   	{
  841.   	BN_ULONG t;

crypto/bn/bn_lib.c:851:2: Binary operation: ([0, min(9223372036854775808, *scalar->d)] - 1):unsigned64 by call to `BN_consttime_swap` 
  849.   	assert(sizeof(BN_ULONG) >= sizeof(int));
  850.   
  851.   	condition = ((condition - 1) >> (BN_BITS2 - 1)) - 1;
          ^
  852.   
  853.   	t = (a->top^b->top) & condition;
