crypto/ec/ec2_mult.c:290: error: INTEGER_OVERFLOW_L2
  ([0, 9223372036854775808] - 1):unsigned64 by call to `BN_consttime_swap`.
Showing all 5 steps of the trace


crypto/ec/ec2_mult.c:284:9: Assignment
282.       if (!mask) {
283.           i--;
284.           mask = BN_TBIT;
               ^
285.       }
286.   

crypto/ec/ec2_mult.c:290:13: Call
288.           word = bn_get_words(scalar)[i];
289.           while (mask) {
290.               BN_consttime_swap(word & mask, x1, x2, group_top);
                   ^
291.               BN_consttime_swap(word & mask, z1, z2, group_top);
292.               if (!gf2m_Madd(group, point->X, x2, z2, x1, z1, ctx))

crypto/bn/bn_lib.c:830:1: <LHS trace>
828.    * a and b cannot be the same number
829.    */
830. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
831.   {
832.       BN_ULONG t;

crypto/bn/bn_lib.c:830:1: Parameter `condition`
  828.    * a and b cannot be the same number
  829.    */
  830. > void BN_consttime_swap(BN_ULONG condition, BIGNUM *a, BIGNUM *b, int nwords)
  831.   {
  832.       BN_ULONG t;

crypto/bn/bn_lib.c:842:5: Binary operation: ([0, 9223372036854775808] - 1):unsigned64 by call to `BN_consttime_swap` 
  840.       assert(sizeof(BN_ULONG) >= sizeof(int));
  841.   
  842.       condition = ((condition - 1) >> (BN_BITS2 - 1)) - 1;
             ^
  843.   
  844.       t = (a->top ^ b->top) & condition;
