crypto/bn/bn_mont.c:229: error: INTEGER_OVERFLOW_L2
  ([-`*mont->N.d`, +oo] - 1):unsigned64 by call to `BN_usub`.
Showing all 6 steps of the trace


crypto/bn/bn_mont.c:135:3: Assignment
133.   #if 1
134.   	for (i=r->top; i<max; i++) /* memset? XXX */
135.   		r->d[i]=0;
         ^
136.   #else
137.   	memset(&(r->d[r->top]),0,(max-r->top)*sizeof(BN_ULONG)); 

crypto/bn/bn_mont.c:229:8: Call
227.   	if (BN_ucmp(ret, &(mont->N)) >= 0)
228.   		{
229.   		if (!BN_usub(ret,ret,&(mont->N))) goto err;
              ^
230.   		}
231.   	retn=1;

crypto/bn/bn_add.c:168:1: <LHS trace>
166.   
167.   /* unsigned subtraction of b from a, a must be larger than b. */
168. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
169.   	{
170.   	int max,min;

crypto/bn/bn_add.c:168:1: Parameter `*a->d`
  166.   
  167.   /* unsigned subtraction of b from a, a must be larger than b. */
  168. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  169.   	{
  170.   	int max,min;

crypto/bn/bn_add.c:198:3: Assignment
  196.   	for (i=0; i<min; i++)
  197.   		{
  198.   		t1= *(ap++);
           ^
  199.   		t2= *(bp++);
  200.   		if (carry)

crypto/bn/bn_add.c:203:4: Binary operation: ([-*mont->N.d, +oo] - 1):unsigned64 by call to `BN_usub` 
  201.   			{
  202.   			carry=(t1 <= t2);
  203.   			t1=(t1-t2-1)&BN_MASK2;
            ^
  204.   			}
  205.   		else
