crypto/bn/bn_rand.c:345: error: INTEGER_OVERFLOW_L2
  (128 - [113, 506]):unsigned64 by call to `SHA512_Final`.
Showing all 16 steps of the trace


crypto/bn/bn_rand.c:340:9: Call
338.           if (RAND_bytes(random_bytes, sizeof(random_bytes)) != 1)
339.               goto err;
340.           SHA512_Init(&sha);
               ^
341.           SHA512_Update(&sha, &done, sizeof(done));
342.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));

crypto/sha/sha512.c:94:5: Assignment
  92.       c->Nl = 0;
  93.       c->Nh = 0;
  94.       c->num = 0;
            ^
  95.       c->md_len = SHA512_DIGEST_LENGTH;
  96.       return 1;

crypto/bn/bn_rand.c:341:9: Call
339.               goto err;
340.           SHA512_Init(&sha);
341.           SHA512_Update(&sha, &done, sizeof(done));
               ^
342.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
343.           SHA512_Update(&sha, message, message_len);

crypto/sha/sha512.c:186:1: Parameter `c->num`
  184.   }
  185.   
  186. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  187.   {
  188.       SHA_LONG64 l;

crypto/bn/bn_rand.c:342:9: Call
340.           SHA512_Init(&sha);
341.           SHA512_Update(&sha, &done, sizeof(done));
342.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
               ^
343.           SHA512_Update(&sha, message, message_len);
344.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));

crypto/sha/sha512.c:186:1: Parameter `c->num`
  184.   }
  185.   
  186. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  187.   {
  188.       SHA_LONG64 l;

crypto/bn/bn_rand.c:343:9: Call
341.           SHA512_Update(&sha, &done, sizeof(done));
342.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
343.           SHA512_Update(&sha, message, message_len);
               ^
344.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
345.           SHA512_Final(digest, &sha);

crypto/sha/sha512.c:186:1: Parameter `c->num`
  184.   }
  185.   
  186. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  187.   {
  188.       SHA_LONG64 l;

crypto/bn/bn_rand.c:344:9: Call
342.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
343.           SHA512_Update(&sha, message, message_len);
344.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
               ^
345.           SHA512_Final(digest, &sha);
346.   

crypto/sha/sha512.c:186:1: Parameter `c->num`
  184.   }
  185.   
  186. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  187.   {
  188.       SHA_LONG64 l;

crypto/bn/bn_rand.c:345:9: Call
343.           SHA512_Update(&sha, message, message_len);
344.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
345.           SHA512_Final(digest, &sha);
               ^
346.   
347.           todo = num_k_bytes - done;

crypto/sha/sha512.c:104:1: <RHS trace>
102.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
103.   
104. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
105.   {
106.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:104:1: Parameter `c->num`
  102.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
  103.   
  104. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
  105.   {
  106.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:107:5: Assignment
  105.   {
  106.       unsigned char *p = (unsigned char *)c->u.p;
  107.       size_t n = c->num;
             ^
  108.   
  109.       p[n] = 0x80;                /* There always is a room for one */

crypto/sha/sha512.c:110:5: Assignment
  108.   
  109.       p[n] = 0x80;                /* There always is a room for one */
  110.       n++;
             ^
  111.       if (n > (sizeof(c->u) - 16))
  112.           memset(p + n, 0, sizeof(c->u) - n), n = 0,

crypto/sha/sha512.c:112:9: Binary operation: (128 - [113, 506]):unsigned64 by call to `SHA512_Final` 
  110.       n++;
  111.       if (n > (sizeof(c->u) - 16))
  112.           memset(p + n, 0, sizeof(c->u) - n), n = 0,
                 ^
  113.               sha512_block_data_order(c, p, 1);
  114.   
