crypto/bn/bn_div.c:457: error: INTEGER_OVERFLOW_L2
  ([0, `divisor->top`] - 1):unsigned64 by call to `BN_lshift`.
Showing all 7 steps of the trace


crypto/bn/bn_div.c:426:1: Parameter `divisor->top`
424.    * branches that may leak sensitive information.
425.    */
426. > static int BN_div_no_branch(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, 
427.   	const BIGNUM *divisor, BN_CTX *ctx)
428.   	{

crypto/bn/bn_div.c:456:24: Call
454.   
455.   	/* First we normalise the numbers */
456.   	norm_shift=BN_BITS2-((BN_num_bits(divisor))%BN_BITS2);
                              ^
457.   	if (!(BN_lshift(sdiv,divisor,norm_shift))) goto err;
458.   	sdiv->neg=0;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
  246.   	}
  247.   
  248. > int BN_num_bits(const BIGNUM *a)
  249.   	{
  250.   	int i = a->top - 1;

crypto/bn/bn_div.c:457:8: Call
455.   	/* First we normalise the numbers */
456.   	norm_shift=BN_BITS2-((BN_num_bits(divisor))%BN_BITS2);
457.   	if (!(BN_lshift(sdiv,divisor,norm_shift))) goto err;
              ^
458.   	sdiv->neg=0;
459.   	norm_shift+=BN_BITS2;

crypto/bn/bn_shift.c:132:1: <LHS trace>
130.   	}
131.   
132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
133.   	{
134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:132:1: Parameter `a->top`
  130.   	}
  131.   
  132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
  133.   	{
  134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:150:8: Binary operation: ([0, divisor->top] - 1):unsigned64 by call to `BN_lshift` 
  148.   	t[a->top+nw]=0;
  149.   	if (lb == 0)
  150.   		for (i=a->top-1; i>=0; i--)
                ^
  151.   			t[nw+i]=f[i];
  152.   	else
