crypto/ecdsa/ecs_ossl.c:441: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `EC_POINT_mul`.
Showing all 12 steps of the trace


crypto/ecdsa/ecs_ossl.c:430:7: Call
428.   	}
429.   	/* u2 = r * w mod q */
430.   	if (!BN_mod_mul(u2, sig->r, u2, order, ctx))
             ^
431.   	{
432.   		ECDSAerr(ECDSA_F_ECDSA_DO_VERIFY, ERR_R_BN_LIB);

crypto/bn/bn_mod.c:178:1: Parameter `r->top`
  176.   
  177.   /* slow but works */
  178. > int BN_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
  179.   	BN_CTX *ctx)
  180.   	{

crypto/ecdsa/ecs_ossl.c:441:7: Call
439.   		goto err;
440.   	}
441.   	if (!EC_POINT_mul(group, point, u1, pub_key, u2, ctx))
             ^
442.   	{
443.   		ECDSAerr(ECDSA_F_ECDSA_DO_VERIFY, ERR_R_EC_LIB);

crypto/ec/ec_lib.c:1128:1: Parameter `g_scalar->top`
  1126.   	}
  1127.   
  1128. > int EC_POINT_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *g_scalar,
  1129.   	const EC_POINT *point, const BIGNUM *p_scalar, BN_CTX *ctx)
  1130.   	{

crypto/ec/ec_lib.c:1139:9: Call
  1137.   	scalars[0] = p_scalar;
  1138.   
  1139.   	return EC_POINTs_mul(group, r, g_scalar, (point != NULL && p_scalar != NULL), points, scalars, ctx);
                  ^
  1140.   	}
  1141.   

crypto/ec/ec_lib.c:1118:1: Parameter `scalar->top`
    1116.    */
    1117.   
    1118. > int EC_POINTs_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
    1119.   	size_t num, const EC_POINT *points[], const BIGNUM *scalars[], BN_CTX *ctx)
    1120.   	{

crypto/ec/ec_lib.c:1123:10: Call
    1121.   	if (group->meth->mul == 0)
    1122.   		/* use default */
    1123.   		return ec_wNAF_mul(group, r, scalar, num, points, scalars, ctx);
                     ^
    1124.   
    1125.   	return group->meth->mul(group, r, scalar, num, points, scalars, ctx);

crypto/ec/ec_mult.c:344:1: Parameter `scalar->top`
      342.    * in the addition if scalar != NULL
      343.    */
      344. > int ec_wNAF_mul(const EC_GROUP *group, EC_POINT *r, const BIGNUM *scalar,
      345.   	size_t num, const EC_POINT *points[], const BIGNUM *scalars[], BN_CTX *ctx)
      346.   	{

crypto/ec/ec_mult.c:416:17: Call
      414.   			/* determine maximum number of blocks that wNAF splitting may yield
      415.   			 * (NB: maximum wNAF length is bit length plus one) */
      416.   			numblocks = (BN_num_bits(scalar) / blocksize) + 1;
                             ^
      417.   
      418.   			/* we cannot use more blocks than we have precomputation for */

crypto/bn/bn_lib.c:248:1: <LHS trace>
246.   	}
247.   
248. > int BN_num_bits(const BIGNUM *a)
249.   	{
250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
        246.   	}
        247.   
        248. > int BN_num_bits(const BIGNUM *a)
        249.   	{
        250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:250:2: Binary operation: ([0, +oo] - 1):unsigned64 by call to `EC_POINT_mul` 
        248.   int BN_num_bits(const BIGNUM *a)
        249.   	{
        250.   	int i = a->top - 1;
                ^
        251.   	bn_check_top(a);
        252.   
