crypto/bn/bn_gf2m.c:1004: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_GF2m_mod_mul_arr`.
Showing all 19 steps of the trace


crypto/bn/bn_gf2m.c:977:1: Parameter `ctx->stack.depth`
975.    * P1363.
976.    */
977. > int BN_GF2m_mod_exp_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
978.                           const int p[], BN_CTX *ctx)
979.   {

crypto/bn/bn_gf2m.c:992:5: Call
990.           return (BN_copy(r, a) != NULL);
991.   
992.       BN_CTX_start(ctx);
           ^
993.       if ((u = BN_CTX_get(ctx)) == NULL)
994.           goto err;

crypto/bn/bn_ctx.c:240:1: Parameter `ctx->stack.depth`
  238.   }
  239.   
  240. > void BN_CTX_start(BN_CTX *ctx)
  241.   {
  242.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_gf2m.c:1001:14: Call
999.       n = BN_num_bits(b) - 1;
1000.       for (i = n - 1; i >= 0; i--) {
1001.           if (!BN_GF2m_mod_sqr_arr(u, u, p, ctx))
                     ^
1002.               goto err;
1003.           if (BN_is_bit_set(b, i)) {

crypto/bn/bn_gf2m.c:568:1: Parameter `ctx->stack.depth`
  566.   
  567.   /* Square a, reduce the result mod p, and store it in a.  r could be a. */
  568. > int BN_GF2m_mod_sqr_arr(BIGNUM *r, const BIGNUM *a, const int p[],
  569.                           BN_CTX *ctx)
  570.   {

crypto/bn/bn_gf2m.c:575:5: Call
  573.   
  574.       bn_check_top(a);
  575.       BN_CTX_start(ctx);
             ^
  576.       if ((s = BN_CTX_get(ctx)) == NULL)
  577.           return 0;

crypto/bn/bn_ctx.c:240:1: Parameter `ctx->stack.depth`
    238.   }
    239.   
    240. > void BN_CTX_start(BN_CTX *ctx)
    241.   {
    242.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_gf2m.c:1004:18: Call
1002.               goto err;
1003.           if (BN_is_bit_set(b, i)) {
1004.               if (!BN_GF2m_mod_mul_arr(u, u, a, p, ctx))
                         ^
1005.                   goto err;
1006.           }

crypto/bn/bn_gf2m.c:489:1: Parameter `ctx->stack.depth`
  487.    * the result in r.  r could be a or b; a could be b.
  488.    */
  489. > int BN_GF2m_mod_mul_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
  490.                           const int p[], BN_CTX *ctx)
  491.   {

crypto/bn/bn_gf2m.c:500:16: Call
  498.   
  499.       if (a == b) {
  500.           return BN_GF2m_mod_sqr_arr(r, a, p, ctx);
                        ^
  501.       }
  502.   

crypto/bn/bn_gf2m.c:568:1: Parameter `ctx->stack.depth`
    566.   
    567.   /* Square a, reduce the result mod p, and store it in a.  r could be a. */
    568. > int BN_GF2m_mod_sqr_arr(BIGNUM *r, const BIGNUM *a, const int p[],
    569.                           BN_CTX *ctx)
    570.   {

crypto/bn/bn_gf2m.c:575:5: Call
    573.   
    574.       bn_check_top(a);
    575.       BN_CTX_start(ctx);
               ^
    576.       if ((s = BN_CTX_get(ctx)) == NULL)
    577.           return 0;

crypto/bn/bn_ctx.c:240:1: Parameter `ctx->stack.depth`
      238.   }
      239.   
      240. > void BN_CTX_start(BN_CTX *ctx)
      241.   {
      242.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_gf2m.c:593:5: Call
    591.       ret = 1;
    592.    err:
    593.       BN_CTX_end(ctx);
               ^
    594.       return ret;
    595.   }

crypto/bn/bn_ctx.c:254:1: Parameter `ctx->stack.depth`
      252.   }
      253.   
      254. > void BN_CTX_end(BN_CTX *ctx)
      255.   {
      256.       CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:260:27: Call
      258.           ctx->err_stack--;
      259.       else {
      260.           unsigned int fp = BN_STACK_pop(&ctx->stack);
                                       ^
      261.           /* Does this stack frame have anything to release? */
      262.           if (fp < ctx->used)

crypto/bn/bn_ctx.c:330:1: <LHS trace>
328.   }
329.   
330. > static unsigned int BN_STACK_pop(BN_STACK *st)
331.   {
332.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:330:1: Parameter `st->depth`
        328.   }
        329.   
        330. > static unsigned int BN_STACK_pop(BN_STACK *st)
        331.   {
        332.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:332:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_GF2m_mod_mul_arr` 
        330.   static unsigned int BN_STACK_pop(BN_STACK *st)
        331.   {
        332.       return st->indexes[--(st->depth)];
                          ^
        333.   }
        334.   
