crypto/bn/bn_recp.c:77: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_div_recp`.
Showing all 29 steps of the trace


crypto/bn/bn_recp.c:55:1: Parameter `ctx->pool.used`
53.   }
54.   
55. > int BN_mod_mul_reciprocal(BIGNUM *r, const BIGNUM *x, const BIGNUM *y,
56.                             BN_RECP_CTX *recp, BN_CTX *ctx)
57.   {

crypto/bn/bn_recp.c:63:14: Call
61.   
62.       BN_CTX_start(ctx);
63.       if ((a = BN_CTX_get(ctx)) == NULL)
                   ^
64.           goto err;
65.       if (y != NULL) {

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
  200.   }
  201.   
  202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
  203.   {
  204.       BIGNUM *ret;

crypto/bn/bn_recp.c:77:11: Call
75.           ca = x;                 /* Just do the mod */
76.   
77.       ret = BN_div_recp(NULL, r, ca, recp, ctx);
                ^
78.    err:
79.       BN_CTX_end(ctx);

crypto/bn/bn_recp.c:84:1: Parameter `ctx->pool.used`
  82.   }
  83.   
  84. > int BN_div_recp(BIGNUM *dv, BIGNUM *rem, const BIGNUM *m,
  85.                   BN_RECP_CTX *recp, BN_CTX *ctx)
  86.   {

crypto/bn/bn_recp.c:93:9: Call
  91.       d = (dv != NULL) ? dv : BN_CTX_get(ctx);
  92.       r = (rem != NULL) ? rem : BN_CTX_get(ctx);
  93.       a = BN_CTX_get(ctx);
                ^
  94.       b = BN_CTX_get(ctx);
  95.       if (b == NULL)

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
    200.   }
    201.   
    202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    203.   {
    204.       BIGNUM *ret;

crypto/bn/bn_recp.c:94:9: Call
  92.       r = (rem != NULL) ? rem : BN_CTX_get(ctx);
  93.       a = BN_CTX_get(ctx);
  94.       b = BN_CTX_get(ctx);
                ^
  95.       if (b == NULL)
  96.           goto err;

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
    200.   }
    201.   
    202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    203.   {
    204.       BIGNUM *ret;

crypto/bn/bn_recp.c:121:23: Call
  119.       /* Nr := round(2^i / N) */
  120.       if (i != recp->shift)
  121.           recp->shift = BN_reciprocal(&(recp->Nr), &(recp->N), i, ctx);
                               ^
  122.       /* BN_reciprocal could have returned -1 for an error */
  123.       if (recp->shift == -1)

crypto/bn/bn_recp.c:174:1: Parameter `ctx->pool.used`
    172.    */
    173.   /* r := 2^len / m */
    174. > int BN_reciprocal(BIGNUM *r, const BIGNUM *m, int len, BN_CTX *ctx)
    175.   {
    176.       int ret = -1;

crypto/bn/bn_recp.c:180:14: Call
    178.   
    179.       BN_CTX_start(ctx);
    180.       if ((t = BN_CTX_get(ctx)) == NULL)
                        ^
    181.           goto err;
    182.   

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
      200.   }
      201.   
      202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
      203.   {
      204.       BIGNUM *ret;

crypto/bn/bn_recp.c:186:10: Call
    184.           goto err;
    185.   
    186.       if (!BN_div(r, NULL, t, m, ctx))
                    ^
    187.           goto err;
    188.   

crypto/bn/bn_div.c:209:1: Parameter `ctx->pool.used`
      207.    * If 'dv' or 'rm' is NULL, the respective value is not returned.
      208.    */
      209. > int BN_div(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, const BIGNUM *divisor,
      210.              BN_CTX *ctx)
      211.   {

crypto/bn/bn_div.c:229:11: Call
      227.       }
      228.   
      229.       ret = bn_div_fixed_top(dv, rm, num, divisor, ctx);
                       ^
      230.   
      231.       if (ret) {

crypto/bn/bn_div.c:264:1: Parameter `ctx->pool.used`
        262.    *       divisor's length is considered public;
        263.    */
        264. > int bn_div_fixed_top(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num,
        265.                        const BIGNUM *divisor, BN_CTX *ctx)
        266.   {

crypto/bn/bn_div.c:282:11: Call
        280.       BN_CTX_start(ctx);
        281.       res = (dv == NULL) ? BN_CTX_get(ctx) : dv;
        282.       tmp = BN_CTX_get(ctx);
                         ^
        283.       snum = BN_CTX_get(ctx);
        284.       sdiv = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
          200.   }
          201.   
          202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
          203.   {
          204.       BIGNUM *ret;

crypto/bn/bn_div.c:283:12: Call
        281.       res = (dv == NULL) ? BN_CTX_get(ctx) : dv;
        282.       tmp = BN_CTX_get(ctx);
        283.       snum = BN_CTX_get(ctx);
                          ^
        284.       sdiv = BN_CTX_get(ctx);
        285.       if (sdiv == NULL)

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
          200.   }
          201.   
          202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
          203.   {
          204.       BIGNUM *ret;

crypto/bn/bn_div.c:284:12: Call
        282.       tmp = BN_CTX_get(ctx);
        283.       snum = BN_CTX_get(ctx);
        284.       sdiv = BN_CTX_get(ctx);
                          ^
        285.       if (sdiv == NULL)
        286.           goto err;

crypto/bn/bn_ctx.c:202:1: Parameter `ctx->pool.used`
          200.   }
          201.   
          202. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
          203.   {
          204.       BIGNUM *ret;

crypto/bn/bn_div.c:450:5: Call
        448.       if (rm != NULL)
        449.           bn_rshift_fixed_top(rm, snum, norm_shift);
        450.       BN_CTX_end(ctx);
                   ^
        451.       return 1;
        452.    err:

crypto/bn/bn_ctx.c:185:1: Parameter `ctx->pool.used`
          183.   }
          184.   
          185. > void BN_CTX_end(BN_CTX *ctx)
          186.   {
          187.       CTXDBG("ENTER BN_CTX_end()", ctx);

crypto/bn/bn_ctx.c:194:13: Call
          192.           /* Does this stack frame have anything to release? */
          193.           if (fp < ctx->used)
          194.               BN_POOL_release(&ctx->pool, ctx->used - fp);
                             ^
          195.           ctx->used = fp;
          196.           /* Unjam "too_many" in case "get" had failed */

crypto/bn/bn_ctx.c:338:1: <LHS trace>
336.   }
337.   
338. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
339.   {
340.       unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:338:1: Parameter `p->used`
            336.   }
            337.   
            338. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
            339.   {
            340.       unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:340:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_div_recp` 
            338.   static void BN_POOL_release(BN_POOL *p, unsigned int num)
            339.   {
            340.       unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;
                       ^
            341.   
            342.       p->used -= num;
