crypto/ecdsa/ecs_ossl.c:330: error: INTEGER_OVERFLOW_L2
  ([1, +oo] - [-125, 127]):unsigned64 by call to `ecdsa_sign_setup`.
Showing all 11 steps of the trace


crypto/ecdsa/ecs_ossl.c:254:1: Parameter `dgst_len`
252.   
253.   
254. > static ECDSA_SIG *ecdsa_do_sign(const unsigned char *dgst, int dgst_len, 
255.   		const BIGNUM *in_kinv, const BIGNUM *in_r, EC_KEY *eckey)
256.   {

crypto/ecdsa/ecs_ossl.c:330:9: Call
328.   		if (in_kinv == NULL || in_r == NULL)
329.   		{
330.   			if (!ecdsa_sign_setup(
               ^
331.   				eckey, ctx, &kinv, &ret->r, dgst, dgst_len))
332.   			{

crypto/ecdsa/ecs_ossl.c:100:1: Parameter `dlen`
  98.   }
  99.   
  100. > static int ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in,
  101.   					BIGNUM **kinvp, BIGNUM **rp,
  102.   					const unsigned char *dgst, int dlen)

crypto/ecdsa/ecs_ossl.c:159:10: Call
  157.   			if (dgst != NULL)
  158.   			{
  159.   				if (!BN_generate_dsa_nonce(k, order, EC_KEY_get0_private_key(eckey),
                  ^
  160.   							   dgst, dlen, ctx))
  161.   					{

crypto/bn/bn_rand.c:324:1: Parameter `message_len`
    322.    * secret. This is intended for use in DSA and ECDSA where an RNG weakness
    323.    * leads directly to private key exposure unless this function is used. */
    324. > int BN_generate_dsa_nonce(BIGNUM *out, const BIGNUM *range, const BIGNUM* priv,
    325.   			  const unsigned char *message, size_t message_len,
    326.   			  BN_CTX *ctx)

crypto/bn/bn_rand.c:363:3: Call
    361.   		SHA512_Update(&sha, &done, sizeof(done));
    362.   		SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
    363.   		SHA512_Update(&sha, message, message_len);
             ^
    364.   		SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
    365.   		SHA512_Final(digest, &sha);

crypto/sha/sha512.c:181:1: <LHS trace>
179.   {   return SHA512_Final (md,c);   }
180.   
181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
182.   	{
183.   	SHA_LONG64	l;

crypto/sha/sha512.c:181:1: Parameter `len`
      179.   {   return SHA512_Final (md,c);   }
      180.   
      181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
      182.   	{
      183.   	SHA_LONG64	l;

crypto/sha/sha512.c:181:1: <RHS trace>
179.   {   return SHA512_Final (md,c);   }
180.   
181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
182.   	{
183.   	SHA_LONG64	l;

crypto/sha/sha512.c:181:1: Parameter `len`
      179.   {   return SHA512_Final (md,c);   }
      180.   
      181. > int SHA512_Update (SHA512_CTX *c, const void *_data, size_t len)
      182.   	{
      183.   	SHA_LONG64	l;

crypto/sha/sha512.c:205:4: Binary operation: ([1, +oo] - [-125, 127]):unsigned64 by call to `ecdsa_sign_setup` 
      203.   		else	{
      204.   			memcpy (p+c->num,data,n), c->num = 0;
      205.   			len-=n, data+=n;
                ^
      206.   			sha512_block_data_order (c,p,1);
      207.   			}
