test/bntest.c:186: error: INTEGER_OVERFLOW_L1
  (0 - 1):unsigned64 by call to `BN_consttime_swap`.
Showing all 5 steps of the trace


test/bntest.c:185:5: Assignment
183.   
184.       /* conditional swap: false */
185.       cond = 0;
           ^
186.       BN_consttime_swap(cond, a, b, top);
187.       if (!equalBN("cswap false", a, c)

test/bntest.c:186:5: Call
184.       /* conditional swap: false */
185.       cond = 0;
186.       BN_consttime_swap(cond, a, b, top);
           ^
187.       if (!equalBN("cswap false", a, c)
188.               || !equalBN("cswap false", b, d))

crypto/bn/bn_lib.c:747:1: <LHS trace>
745.    * Assumes that no more than nwords are used by either a or b.
746.    */
747. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
748.   {
749.       BN_ULONG t;

crypto/bn/bn_lib.c:747:1: Parameter `condition`
  745.    * Assumes that no more than nwords are used by either a or b.
  746.    */
  747. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  748.   {
  749.       BN_ULONG t;

crypto/bn/bn_lib.c:758:5: Binary operation: (0 - 1):unsigned64 by call to `BN_consttime_swap` 
  756.       bn_wcheck_size(b, nwords);
  757.   
  758.       condition = ((~condition & ((condition - 1))) >> (BN_BITS2 - 1)) - 1;
             ^
  759.   
  760.       t = (a->top ^ b->top) & condition;
