crypto/ec/ec2_smpl.c:881: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `ec_scalar_mul_ladder`.
Showing all 20 steps of the trace


crypto/ec/ec2_smpl.c:880:10: Call
878.       }
879.   
880.       if (!ec_scalar_mul_ladder(group, t, scalar, NULL, ctx)
                ^
881.           || !ec_scalar_mul_ladder(group, r, scalars[0], points[0], ctx)
882.           || !EC_POINT_add(group, r, t, r, ctx))

crypto/ec/ec_mult.c:139:1: Parameter `ctx->pool.used`
  137.    * Returns 1 on success, 0 otherwise.
  138.    */
  139. > int ec_scalar_mul_ladder(const EC_GROUP *group, EC_POINT *r,
  140.                            const BIGNUM *scalar, const EC_POINT *point,
  141.                            BN_CTX *ctx)

crypto/ec/ec2_smpl.c:881:13: Call
879.   
880.       if (!ec_scalar_mul_ladder(group, t, scalar, NULL, ctx)
881.           || !ec_scalar_mul_ladder(group, r, scalars[0], points[0], ctx)
                   ^
882.           || !EC_POINT_add(group, r, t, r, ctx))
883.           goto err;

crypto/ec/ec_mult.c:139:1: Parameter `ctx->pool.used`
  137.    * Returns 1 on success, 0 otherwise.
  138.    */
  139. > int ec_scalar_mul_ladder(const EC_GROUP *group, EC_POINT *r,
  140.                            const BIGNUM *scalar, const EC_POINT *point,
  141.                            BN_CTX *ctx)

crypto/ec/ec_mult.c:188:19: Call
  186.       EC_POINT_BN_set_flags(s, BN_FLG_CONSTTIME);
  187.   
  188.       cardinality = BN_CTX_get(ctx);
                           ^
  189.       lambda = BN_CTX_get(ctx);
  190.       k = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:212:1: Parameter `ctx->pool.used`
    210.   }
    211.   
    212. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    213.   {
    214.       BIGNUM *ret;

crypto/ec/ec_mult.c:189:14: Call
  187.   
  188.       cardinality = BN_CTX_get(ctx);
  189.       lambda = BN_CTX_get(ctx);
                      ^
  190.       k = BN_CTX_get(ctx);
  191.       if (k == NULL) {

crypto/bn/bn_ctx.c:212:1: Parameter `ctx->pool.used`
    210.   }
    211.   
    212. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    213.   {
    214.       BIGNUM *ret;

crypto/ec/ec_mult.c:190:9: Call
  188.       cardinality = BN_CTX_get(ctx);
  189.       lambda = BN_CTX_get(ctx);
  190.       k = BN_CTX_get(ctx);
                 ^
  191.       if (k == NULL) {
  192.           ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_MALLOC_FAILURE);

crypto/bn/bn_ctx.c:212:1: Parameter `ctx->pool.used`
    210.   }
    211.   
    212. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    213.   {
    214.       BIGNUM *ret;

crypto/ec/ec_mult.c:196:10: Call
  194.       }
  195.   
  196.       if (!BN_mul(cardinality, group->order, group->cofactor, ctx)) {
                  ^
  197.           ECerr(EC_F_EC_SCALAR_MUL_LADDER, ERR_R_BN_LIB);
  198.           goto err;

crypto/bn/bn_mul.c:497:1: Parameter `ctx->pool.used`
    495.   #endif                          /* BN_RECURSION */
    496.   
    497. > int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
    498.   {
    499.       int ret = bn_mul_fixed_top(r, a, b, ctx);

crypto/bn/bn_mul.c:499:15: Call
    497.   int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
    498.   {
    499.       int ret = bn_mul_fixed_top(r, a, b, ctx);
                         ^
    500.   
    501.       bn_correct_top(r);

crypto/bn/bn_mul.c:507:1: Parameter `ctx->pool.used`
      505.   }
      506.   
      507. > int bn_mul_fixed_top(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
      508.   {
      509.       int ret = 0;

crypto/bn/bn_mul.c:618:5: Call
      616.    err:
      617.       bn_check_top(r);
      618.       BN_CTX_end(ctx);
                 ^
      619.       return ret;
      620.   }

crypto/bn/bn_ctx.c:195:1: Parameter `ctx->pool.used`
        193.   }
        194.   
        195. > void BN_CTX_end(BN_CTX *ctx)
        196.   {
        197.       CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:204:13: Call
        202.           /* Does this stack frame have anything to release? */
        203.           if (fp < ctx->used)
        204.               BN_POOL_release(&ctx->pool, ctx->used - fp);
                           ^
        205.           ctx->used = fp;
        206.           /* Unjam "too_many" in case "get" had failed */

crypto/bn/bn_ctx.c:346:1: <LHS trace>
344.   }
345.   
346. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
347.   {
348.       unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:346:1: Parameter `p->used`
          344.   }
          345.   
          346. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
          347.   {
          348.       unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:348:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ec_scalar_mul_ladder` 
          346.   static void BN_POOL_release(BN_POOL *p, unsigned int num)
          347.   {
          348.       unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;
                     ^
          349.   
          350.       p->used -= num;
