crypto/rsa/rsa_chk.c:145: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_mod_mul`.
Showing all 34 steps of the trace


crypto/rsa/rsa_chk.c:86:9: Call
84.   
85.       /* p prime? */
86.       r = BN_is_prime_ex(key->p, BN_prime_checks, NULL, cb);
              ^
87.       if (r != 1) {
88.           ret = r;

crypto/bn/bn_prime.c:295:1: Parameter `ctx_passed->stack.depth`
  293.   }
  294.   
  295. > int BN_is_prime_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
  296.                      BN_GENCB *cb)
  297.   {

crypto/bn/bn_prime.c:298:12: Call
  296.                      BN_GENCB *cb)
  297.   {
  298.       return BN_is_prime_fasttest_ex(a, checks, ctx_passed, 0, cb);
                    ^
  299.   }
  300.   

crypto/bn/bn_prime.c:301:1: Parameter `ctx_passed->stack.depth`
    299.   }
    300.   
    301. > int BN_is_prime_fasttest_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
    302.                               int do_trial_division, BN_GENCB *cb)
    303.   {

crypto/rsa/rsa_chk.c:95:9: Call
93.   
94.       /* q prime? */
95.       r = BN_is_prime_ex(key->q, BN_prime_checks, NULL, cb);
              ^
96.       if (r != 1) {
97.           ret = r;

crypto/bn/bn_prime.c:295:1: Parameter `ctx_passed->stack.depth`
  293.   }
  294.   
  295. > int BN_is_prime_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
  296.                      BN_GENCB *cb)
  297.   {

crypto/bn/bn_prime.c:298:12: Call
  296.                      BN_GENCB *cb)
  297.   {
  298.       return BN_is_prime_fasttest_ex(a, checks, ctx_passed, 0, cb);
                    ^
  299.   }
  300.   

crypto/bn/bn_prime.c:301:1: Parameter `ctx_passed->stack.depth`
    299.   }
    300.   
    301. > int BN_is_prime_fasttest_ex(const BIGNUM *a, int checks, BN_CTX *ctx_passed,
    302.                               int do_trial_division, BN_GENCB *cb)
    303.   {

crypto/rsa/rsa_chk.c:104:9: Call
102.   
103.       /* n = p*q? */
104.       r = BN_mul(i, key->p, key->q, ctx);
               ^
105.       if (!r) {
106.           ret = -1;

crypto/bn/bn_mul.c:883:1: Parameter `ctx->stack.depth`
  881.   #endif                          /* BN_RECURSION */
  882.   
  883. > int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
  884.   {
  885.       int ret = 0;

crypto/rsa/rsa_chk.c:129:9: Call
127.   
128.       /* now compute k = lcm(i,j) */
129.       r = BN_mul(l, i, j, ctx);
               ^
130.       if (!r) {
131.           ret = -1;

crypto/bn/bn_mul.c:883:1: Parameter `ctx->stack.depth`
  881.   #endif                          /* BN_RECURSION */
  882.   
  883. > int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
  884.   {
  885.       int ret = 0;

crypto/rsa/rsa_chk.c:134:9: Call
132.           goto err;
133.       }
134.       r = BN_gcd(m, i, j, ctx);
               ^
135.       if (!r) {
136.           ret = -1;

crypto/bn/bn_gcd.c:117:1: Parameter `ctx->stack.depth`
  115.   static BIGNUM *euclid(BIGNUM *a, BIGNUM *b);
  116.   
  117. > int BN_gcd(BIGNUM *r, const BIGNUM *in_a, const BIGNUM *in_b, BN_CTX *ctx)
  118.   {
  119.       BIGNUM *a, *b, *t;

crypto/bn/bn_gcd.c:125:5: Call
  123.       bn_check_top(in_b);
  124.   
  125.       BN_CTX_start(ctx);
             ^
  126.       a = BN_CTX_get(ctx);
  127.       b = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:240:1: Parameter `ctx->stack.depth`
    238.   }
    239.   
    240. > void BN_CTX_start(BN_CTX *ctx)
    241.   {
    242.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_gcd.c:151:5: Call
  149.       ret = 1;
  150.    err:
  151.       BN_CTX_end(ctx);
             ^
  152.       bn_check_top(r);
  153.       return (ret);

crypto/bn/bn_ctx.c:254:1: Parameter `ctx->stack.depth`
    252.   }
    253.   
    254. > void BN_CTX_end(BN_CTX *ctx)
    255.   {
    256.       CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/rsa/rsa_chk.c:139:9: Call
137.           goto err;
138.       }
139.       r = BN_div(k, NULL, l, m, ctx); /* remainder is 0 */
               ^
140.       if (!r) {
141.           ret = -1;

crypto/bn/bn_div.c:189:1: Parameter `ctx->stack.depth`
  187.    * If 'dv' or 'rm' is NULL, the respective value is not returned.
  188.    */
  189. > int BN_div(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, const BIGNUM *divisor,
  190.              BN_CTX *ctx)
  191.   {

crypto/rsa/rsa_chk.c:145:9: Call
143.       }
144.   
145.       r = BN_mod_mul(i, key->d, key->e, k, ctx);
               ^
146.       if (!r) {
147.           ret = -1;

crypto/bn/bn_mod.c:179:1: Parameter `ctx->stack.depth`
  177.   
  178.   /* slow but works */
  179. > int BN_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
  180.                  BN_CTX *ctx)
  181.   {

crypto/bn/bn_mod.c:189:5: Call
  187.       bn_check_top(m);
  188.   
  189.       BN_CTX_start(ctx);
             ^
  190.       if ((t = BN_CTX_get(ctx)) == NULL)
  191.           goto err;

crypto/bn/bn_ctx.c:240:1: Parameter `ctx->stack.depth`
    238.   }
    239.   
    240. > void BN_CTX_start(BN_CTX *ctx)
    241.   {
    242.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_mod.c:196:14: Call
  194.               goto err;
  195.       } else {
  196.           if (!BN_mul(t, a, b, ctx))
                      ^
  197.               goto err;
  198.       }

crypto/bn/bn_mul.c:883:1: Parameter `ctx->stack.depth`
    881.   #endif                          /* BN_RECURSION */
    882.   
    883. > int BN_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, BN_CTX *ctx)
    884.   {
    885.       int ret = 0;

crypto/bn/bn_mul.c:909:5: Call
    907.       top = al + bl;
    908.   
    909.       BN_CTX_start(ctx);
               ^
    910.       if ((r == a) || (r == b)) {
    911.           if ((rr = BN_CTX_get(ctx)) == NULL)

crypto/bn/bn_ctx.c:240:1: Parameter `ctx->stack.depth`
      238.   }
      239.   
      240. > void BN_CTX_start(BN_CTX *ctx)
      241.   {
      242.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_mul.c:1033:5: Call
    1031.    err:
    1032.       bn_check_top(r);
    1033.       BN_CTX_end(ctx);
                ^
    1034.       return (ret);
    1035.   }

crypto/bn/bn_ctx.c:254:1: Parameter `ctx->stack.depth`
      252.   }
      253.   
      254. > void BN_CTX_end(BN_CTX *ctx)
      255.   {
      256.       CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:260:27: Call
      258.           ctx->err_stack--;
      259.       else {
      260.           unsigned int fp = BN_STACK_pop(&ctx->stack);
                                       ^
      261.           /* Does this stack frame have anything to release? */
      262.           if (fp < ctx->used)

crypto/bn/bn_ctx.c:330:1: <LHS trace>
328.   }
329.   
330. > static unsigned int BN_STACK_pop(BN_STACK *st)
331.   {
332.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:330:1: Parameter `st->depth`
        328.   }
        329.   
        330. > static unsigned int BN_STACK_pop(BN_STACK *st)
        331.   {
        332.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:332:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_mod_mul` 
        330.   static unsigned int BN_STACK_pop(BN_STACK *st)
        331.   {
        332.       return st->indexes[--(st->depth)];
                          ^
        333.   }
        334.   
