crypto/bn/bn_gf2m.c:701: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_GF2m_mod_mul`.
Showing all 15 steps of the trace


crypto/bn/bn_gf2m.c:700:7: Call
698.   	if (xinv == NULL) goto err;
699.   	
700.   	if (!BN_GF2m_mod_inv(xinv, x, p, ctx)) goto err;
             ^
701.   	if (!BN_GF2m_mod_mul(r, y, xinv, p, ctx)) goto err;
702.   	bn_check_top(r);

crypto/bn/bn_gf2m.c:654:4: Call
  652.           bn_correct_top(v);
  653.   #endif
  654.     	BN_CTX_end(ctx);
            ^
  655.   	return ret;
  656.   	}

crypto/bn/bn_ctx.c:271:1: Parameter `ctx->pool.used`
    269.   	}
    270.   
    271. > void BN_CTX_end(BN_CTX *ctx)
    272.   	{
    273.   	CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_gf2m.c:701:7: Call
699.   	
700.   	if (!BN_GF2m_mod_inv(xinv, x, p, ctx)) goto err;
701.   	if (!BN_GF2m_mod_mul(r, y, xinv, p, ctx)) goto err;
             ^
702.   	bn_check_top(r);
703.   	ret = 1;

crypto/bn/bn_gf2m.c:441:1: Parameter `ctx->pool.used`
  439.    * BN_GF2m_mod_mul_arr function.
  440.    */
  441. > int	BN_GF2m_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *p, BN_CTX *ctx)
  442.   	{
  443.   	int ret = 0;

crypto/bn/bn_gf2m.c:456:8: Call
  454.   		goto err;
  455.   		}
  456.   	ret = BN_GF2m_mod_mul_arr(r, a, b, arr, ctx);
                ^
  457.   	bn_check_top(r);
  458.   err:

crypto/bn/bn_gf2m.c:388:1: Parameter `ctx->pool.used`
    386.    * the result in r.  r could be a or b; a could be b.
    387.    */
    388. > int	BN_GF2m_mod_mul_arr(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const int p[], BN_CTX *ctx)
    389.   	{
    390.   	int zlen, i, j, k, ret = 0;

crypto/bn/bn_gf2m.c:403:11: Call
    401.   
    402.   	BN_CTX_start(ctx);
    403.   	if ((s = BN_CTX_get(ctx)) == NULL) goto err;
                     ^
    404.   	
    405.   	zlen = a->top + b->top + 4;

crypto/bn/bn_ctx.c:289:1: Parameter `ctx->pool.used`
      287.   	}
      288.   
      289. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
      290.   	{
      291.   	BIGNUM *ret;

crypto/bn/bn_gf2m.c:430:2: Call
    428.   
    429.   err:
    430.   	BN_CTX_end(ctx);
            ^
    431.   	return ret;
    432.   	}

crypto/bn/bn_ctx.c:271:1: Parameter `ctx->pool.used`
      269.   	}
      270.   
      271. > void BN_CTX_end(BN_CTX *ctx)
      272.   	{
      273.   	CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:281:4: Call
      279.   		/* Does this stack frame have anything to release? */
      280.   		if(fp < ctx->used)
      281.   			BN_POOL_release(&ctx->pool, ctx->used - fp);
                ^
      282.   		ctx->used = fp;
      283.   		/* Unjam "too_many" in case "get" had failed */

crypto/bn/bn_ctx.c:439:1: <LHS trace>
437.   	}
438.   
439. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
440.   	{
441.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:439:1: Parameter `p->used`
        437.   	}
        438.   
        439. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
        440.   	{
        441.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:441:2: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_GF2m_mod_mul` 
        439.   static void BN_POOL_release(BN_POOL *p, unsigned int num)
        440.   	{
        441.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;
                ^
        442.   	p->used -= num;
        443.   	while(num--)
