crypto/ec/ecp_nist.c:200: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_sqr`.
Showing all 11 steps of the trace


crypto/ec/ecp_nist.c:186:1: Parameter `ctx->pool.used`
184.   
185.   
186. > int ec_GFp_nist_field_sqr(const EC_GROUP *group, BIGNUM *r, const BIGNUM *a,
187.   	BN_CTX *ctx)
188.   	{

crypto/ec/ecp_nist.c:200:7: Call
198.   		if ((ctx_new = ctx = BN_CTX_new()) == NULL) goto err;
199.   
200.   	if (!BN_sqr(r, a, ctx)) goto err;
             ^
201.   	if (!group->field_mod_func(r, r, group->field, ctx))
202.   		goto err;

crypto/bn/bn_sqr.c:64:1: Parameter `ctx->pool.used`
  62.   /* r must not be a */
  63.   /* I've just gone over this and it is now %20 faster on x86 - eay - 27 Jun 96 */
  64. > int BN_sqr(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx)
  65.   	{
  66.   	int max,al;

crypto/bn/bn_sqr.c:82:6: Call
  80.   	BN_CTX_start(ctx);
  81.   	rr=(a != r) ? r : BN_CTX_get(ctx);
  82.   	tmp=BN_CTX_get(ctx);
             ^
  83.   	if (!rr || !tmp) goto err;
  84.   

crypto/bn/bn_ctx.c:289:1: Parameter `ctx->pool.used`
    287.   	}
    288.   
    289. > BIGNUM *BN_CTX_get(BN_CTX *ctx)
    290.   	{
    291.   	BIGNUM *ret;

crypto/bn/bn_sqr.c:150:2: Call
  148.   	bn_check_top(rr);
  149.   	bn_check_top(tmp);
  150.   	BN_CTX_end(ctx);
          ^
  151.   	return(ret);
  152.   	}

crypto/bn/bn_ctx.c:271:1: Parameter `ctx->pool.used`
    269.   	}
    270.   
    271. > void BN_CTX_end(BN_CTX *ctx)
    272.   	{
    273.   	CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:281:4: Call
    279.   		/* Does this stack frame have anything to release? */
    280.   		if(fp < ctx->used)
    281.   			BN_POOL_release(&ctx->pool, ctx->used - fp);
              ^
    282.   		ctx->used = fp;
    283.   		/* Unjam "too_many" in case "get" had failed */

crypto/bn/bn_ctx.c:439:1: <LHS trace>
437.   	}
438.   
439. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
440.   	{
441.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:439:1: Parameter `p->used`
      437.   	}
      438.   
      439. > static void BN_POOL_release(BN_POOL *p, unsigned int num)
      440.   	{
      441.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;

crypto/bn/bn_ctx.c:441:2: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_sqr` 
      439.   static void BN_POOL_release(BN_POOL *p, unsigned int num)
      440.   	{
      441.   	unsigned int offset = (p->used - 1) % BN_CTX_POOL_SIZE;
              ^
      442.   	p->used -= num;
      443.   	while(num--)
