crypto/jpake/jpake.c:233: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_cmp`.
Showing all 6 steps of the trace


crypto/jpake/jpake.c:230:5: Call
228.       BN_mod_exp(t2, p->gx, h, ctx->p.p, ctx->ctx);
229.      /* t3 = t1 * t2 = g^{hx} * g^b = g^{hx+b} = g^r (allegedly) */
230.       BN_mod_mul(t3, t1, t2, ctx->p.p, ctx->ctx);
           ^
231.   
232.      /* verify t3 == g^r */

crypto/bn/bn_mod.c:178:1: Parameter `r->top`
  176.   
  177.   /* slow but works */
  178. > int BN_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
  179.   	BN_CTX *ctx)
  180.   	{

crypto/jpake/jpake.c:233:8: Call
231.   
232.      /* verify t3 == g^r */
233.       if(BN_cmp(t3, p->zkpx.gr) == 0)
              ^
234.   	ret = 1;
235.       else

crypto/bn/bn_lib.c:678:1: <LHS trace>
676.   	}
677.   
678. > int BN_cmp(const BIGNUM *a, const BIGNUM *b)
679.   	{
680.   	int i;

crypto/bn/bn_lib.c:678:1: Parameter `a->top`
  676.   	}
  677.   
  678. > int BN_cmp(const BIGNUM *a, const BIGNUM *b)
  679.   	{
  680.   	int i;

crypto/bn/bn_lib.c:709:7: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_cmp` 
  707.   	if (a->top > b->top) return(gt);
  708.   	if (a->top < b->top) return(lt);
  709.   	for (i=a->top-1; i>=0; i--)
               ^
  710.   		{
  711.   		t1=a->d[i];
