crypto/pem/pvkfmt.c:529: error: INTEGER_OVERFLOW_L2
  ([0, `pk->pkey.rsa->iqmp->top`] - 1):unsigned64 by call to `write_rsa`.
Showing all 9 steps of the trace


crypto/pem/pvkfmt.c:483:1: Parameter `pk->pkey.rsa->iqmp->top`
481.   static void write_dsa(unsigned char **out, DSA *dsa, int ispub);
482.   	
483. > static int do_i2b(unsigned char **out, EVP_PKEY *pk, int ispub)
484.   	{
485.   	unsigned char *p;

crypto/pem/pvkfmt.c:529:3: Call
527.   		write_dsa(&p, pk->pkey.dsa, ispub);
528.   	else
529.   		write_rsa(&p, pk->pkey.rsa, ispub);
         ^
530.   	if (!noinc)
531.   		*out += outlen;

crypto/pem/pvkfmt.c:610:1: Parameter `rsa->iqmp->top`
  608.   
  609.   
  610. > static void write_rsa(unsigned char **out, RSA *rsa, int ispub)
  611.   	{
  612.   	int nbyte, hnbyte;

crypto/pem/pvkfmt.c:623:2: Call
  621.   	write_lebn(out, rsa->dmp1, hnbyte);
  622.   	write_lebn(out, rsa->dmq1, hnbyte);
  623.   	write_lebn(out, rsa->iqmp, hnbyte);
          ^
  624.   	write_lebn(out, rsa->d, nbyte);
  625.   	}

crypto/pem/pvkfmt.c:449:1: Parameter `bn->top`
    447.   	}
    448.   
    449. > static void write_lebn(unsigned char **out, const BIGNUM *bn, int len)
    450.   	{
    451.   	int nb, i;

crypto/pem/pvkfmt.c:453:7: Call
    451.   	int nb, i;
    452.   	unsigned char *p = *out, *q, c;
    453.   	nb = BN_num_bytes(bn);
                 ^
    454.   	BN_bn2bin(bn, p);
    455.   	q = p + nb - 1;

crypto/bn/bn_lib.c:248:1: <LHS trace>
246.   	}
247.   
248. > int BN_num_bits(const BIGNUM *a)
249.   	{
250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
      246.   	}
      247.   
      248. > int BN_num_bits(const BIGNUM *a)
      249.   	{
      250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:250:2: Binary operation: ([0, pk->pkey.rsa->iqmp->top] - 1):unsigned64 by call to `write_rsa` 
      248.   int BN_num_bits(const BIGNUM *a)
      249.   	{
      250.   	int i = a->top - 1;
              ^
      251.   	bn_check_top(a);
      252.   
