crypto/bn/bn_mont.c:204: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_usub`.
Showing all 6 steps of the trace


crypto/bn/bn_mont.c:144:4: Assignment
142.   #if 1
143.   		for (i=r->top; i<max; i++) /* memset? XXX */
144.   			r->d[i]=0;
          ^
145.   #else
146.   		memset(&(r->d[r->top]),0,(max-r->top)*sizeof(BN_ULONG)); 

crypto/bn/bn_mont.c:204:4: Call
202.   		if (BN_ucmp(ret, &(mont->N)) >= 0)
203.   			{
204.   			BN_usub(ret,ret,&(mont->N)); /* XXX */
          ^
205.   			}
206.   		retn=1;

crypto/bn/bn_add.c:167:1: <LHS trace>
165.   
166.   /* unsigned subtraction of b from a, a must be larger than b. */
167. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
168.   	{
169.   	int max,min;

crypto/bn/bn_add.c:167:1: Parameter `*a->d`
  165.   
  166.   /* unsigned subtraction of b from a, a must be larger than b. */
  167. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  168.   	{
  169.   	int max,min;

crypto/bn/bn_add.c:226:4: Assignment
  224.   			{
  225.   			i++;
  226.   			t1= *(ap++);
            ^
  227.   			t2=(t1-1)&BN_MASK2;
  228.   			*(rp++)=t2;

crypto/bn/bn_add.c:227:4: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_usub` 
  225.   			i++;
  226.   			t1= *(ap++);
  227.   			t2=(t1-1)&BN_MASK2;
            ^
  228.   			*(rp++)=t2;
  229.   			if (t1 > t2) break;
