crypto/ec/ecp_smpl.c:736: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_usub`.
Showing all 7 steps of the trace


crypto/ec/ecp_smpl.c:705:7: Call
703.   		}
704.   	
705.   	if (!BN_mod_sqrt(y, tmp1, &group->field, ctx))
             ^
706.   		{
707.   		unsigned long err = ERR_peek_error();

crypto/bn/bn_sqrt.c:62:1: Parameter `*p->d`
  60.   
  61.   
  62. > BIGNUM *BN_mod_sqrt(BIGNUM *in, const BIGNUM *a, const BIGNUM *p, BN_CTX *ctx) 
  63.   /* Returns 'ret' such that
  64.    *      ret^2 == a (mod p),

crypto/ec/ecp_smpl.c:736:8: Call
734.   			goto err;
735.   			}
736.   		if (!BN_usub(y, &group->field, y)) goto err;
              ^
737.   		}
738.   	if (y_bit != BN_is_odd(y))

crypto/bn/bn_add.c:168:1: <LHS trace>
166.   
167.   /* unsigned subtraction of b from a, a must be larger than b. */
168. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
169.   	{
170.   	int max,min;

crypto/bn/bn_add.c:168:1: Parameter `*a->d`
  166.   
  167.   /* unsigned subtraction of b from a, a must be larger than b. */
  168. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  169.   	{
  170.   	int max,min;

crypto/bn/bn_add.c:227:4: Assignment
  225.   			{
  226.   			i++;
  227.   			t1= *(ap++);
            ^
  228.   			t2=(t1-1)&BN_MASK2;
  229.   			*(rp++)=t2;

crypto/bn/bn_add.c:228:4: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_usub` 
  226.   			i++;
  227.   			t1= *(ap++);
  228.   			t2=(t1-1)&BN_MASK2;
            ^
  229.   			*(rp++)=t2;
  230.   			if (t1 > t2) break;
