crypto/modes/gcm128.c:295: error: INTEGER_OVERFLOW_L2
  (0 - [0, 1]):unsigned64.
Showing all 5 steps of the trace


crypto/modes/gcm128.c:265:1: <RHS trace>
263.   #elif   TABLE_BITS==4
264.   
265. > static void gcm_init_4bit(u128 Htable[16], u64 H[2])
266.   {
267.       u128 V;

crypto/modes/gcm128.c:265:1: Parameter `*H`
263.   #elif   TABLE_BITS==4
264.   
265. > static void gcm_init_4bit(u128 Htable[16], u64 H[2])
266.   {
267.       u128 V;

crypto/modes/gcm128.c:274:5: Assignment
272.       Htable[0].hi = 0;
273.       Htable[0].lo = 0;
274.       V.hi = H[0];
           ^
275.       V.lo = H[1];
276.   

crypto/modes/gcm128.c:293:5: Assignment
291.   # else
292.       Htable[8] = V;
293.       REDUCE1BIT(V);
           ^
294.       Htable[4] = V;
295.       REDUCE1BIT(V);

crypto/modes/gcm128.c:295:5: Binary operation: (0 - [0, 1]):unsigned64
293.       REDUCE1BIT(V);
294.       Htable[4] = V;
295.       REDUCE1BIT(V);
           ^
296.       Htable[2] = V;
297.       REDUCE1BIT(V);
