crypto/ec/curve25519.c:5430: error: INTEGER_OVERFLOW_L2
  (32 - [1, 127]):unsigned64 by call to `SHA512_Update`.
Showing all 10 steps of the trace


crypto/ec/curve25519.c:5428:3: Call
5426.     fe_neg(A.T, A.T);
5427.   
5428.     SHA512_Init(&hash_ctx);
          ^
5429.     SHA512_Update(&hash_ctx, r, 32);
5430.     SHA512_Update(&hash_ctx, public_key, 32);

crypto/sha/sha512.c:130:5: Assignment
  128.       c->Nl = 0;
  129.       c->Nh = 0;
  130.       c->num = 0;
             ^
  131.       c->md_len = SHA512_DIGEST_LENGTH;
  132.       return 1;

crypto/ec/curve25519.c:5429:3: Call
5427.   
5428.     SHA512_Init(&hash_ctx);
5429.     SHA512_Update(&hash_ctx, r, 32);
          ^
5430.     SHA512_Update(&hash_ctx, public_key, 32);
5431.     SHA512_Update(&hash_ctx, message, message_len);

crypto/sha/sha512.c:264:1: Parameter `c->num`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/ec/curve25519.c:5430:3: Call
5428.     SHA512_Init(&hash_ctx);
5429.     SHA512_Update(&hash_ctx, r, 32);
5430.     SHA512_Update(&hash_ctx, public_key, 32);
          ^
5431.     SHA512_Update(&hash_ctx, message, message_len);
5432.     SHA512_Final(h, &hash_ctx);

crypto/sha/sha512.c:264:1: <LHS trace>
262.   }
263.   
264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
265.   {
266.       SHA_LONG64 l;

crypto/sha/sha512.c:264:1: Parameter `len`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/sha/sha512.c:264:1: <RHS trace>
262.   }
263.   
264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
265.   {
266.       SHA_LONG64 l;

crypto/sha/sha512.c:264:1: Parameter `len`
  262.   }
  263.   
  264. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  265.   {
  266.       SHA_LONG64 l;

crypto/sha/sha512.c:288:13: Binary operation: (32 - [1, 127]):unsigned64 by call to `SHA512_Update` 
  286.           } else {
  287.               memcpy(p + c->num, data, n), c->num = 0;
  288.               len -= n, data += n;
                     ^
  289.               sha512_block_data_order(c, p, 1);
  290.           }
