crypto/dsa/dsa_ossl.c:163: error: INTEGER_OVERFLOW_L2
  ([1, +oo] - [-125, 127]):unsigned64 by call to `dsa_sign_setup`.
Showing all 11 steps of the trace


crypto/dsa/dsa_ossl.c:136:1: Parameter `dlen`
134.   }
135.   
136. > static DSA_SIG *dsa_do_sign(const unsigned char *dgst, int dlen, DSA *dsa)
137.   	{
138.   	BIGNUM *kinv=NULL,*r=NULL,*s=NULL;

crypto/dsa/dsa_ossl.c:163:8: Call
161.   	if ((dsa->kinv == NULL) || (dsa->r == NULL))
162.   		{
163.   		if (!dsa_sign_setup(dsa,ctx,&kinv,&r,dgst,dlen))
              ^
164.   			goto err;
165.   		}

crypto/dsa/dsa_ossl.c:228:1: Parameter `dlen`
  226.   }
  227.   
  228. > static int dsa_sign_setup(DSA *dsa, BN_CTX *ctx_in,
  229.   				      BIGNUM **kinvp, BIGNUM **rp,
  230.   				      const unsigned char *dgst, int dlen)

crypto/dsa/dsa_ossl.c:264:9: Call
  262.   			 * + random). This protects the private key from a weak
  263.   			 * PRNG. */
  264.   			if (!BN_generate_dsa_nonce(k, dsa->q, dsa->priv_key, dgst,
                 ^
  265.   						   dlen, ctx))
  266.   				goto err;

crypto/bn/bn_rand.c:316:1: Parameter `message_len`
    314.    * secret. This is intended for use in DSA and ECDSA where an RNG weakness
    315.    * leads directly to private key exposure unless this function is used. */
    316. > int BN_generate_dsa_nonce(BIGNUM *out, const BIGNUM *range, const BIGNUM* priv,
    317.   			  const unsigned char *message, size_t message_len,
    318.   			  BN_CTX *ctx)

crypto/bn/bn_rand.c:355:3: Call
    353.   		SHA512_Update(&sha, &done, sizeof(done));
    354.   		SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
    355.   		SHA512_Update(&sha, message, message_len);
             ^
    356.   		SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
    357.   		SHA512_Final(digest, &sha);

crypto/sha/sha512.c:181:1: <LHS trace>
179.   {   return SHA512_Final (md,c);   }
180.   
181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
182.   	{
183.   	SHA_LONG64	l;

crypto/sha/sha512.c:181:1: Parameter `len`
      179.   {   return SHA512_Final (md,c);   }
      180.   
      181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
      182.   	{
      183.   	SHA_LONG64	l;

crypto/sha/sha512.c:181:1: <RHS trace>
179.   {   return SHA512_Final (md,c);   }
180.   
181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
182.   	{
183.   	SHA_LONG64	l;

crypto/sha/sha512.c:181:1: Parameter `len`
      179.   {   return SHA512_Final (md,c);   }
      180.   
      181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
      182.   	{
      183.   	SHA_LONG64	l;

crypto/sha/sha512.c:205:4: Binary operation: ([1, +oo] - [-125, 127]):unsigned64 by call to `dsa_sign_setup` 
      203.   		else	{
      204.   			memcpy (p+c->num,data,n), c->num = 0;
      205.   			len-=n, data+=n;
                ^
      206.   			sha512_block_data_order (c,p,1);
      207.   			}
