crypto/ec/ecp_smpl.c:1380: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_ucmp`.
Showing all 11 steps of the trace


crypto/ec/ecp_smpl.c:1352:9: Call
1350.   			if (!BN_mod_lshift1_quick(tmp, Z4, p)) goto err;
1351.   			if (!BN_mod_add_quick(tmp, tmp, Z4, p)) goto err;
1352.   			if (!BN_mod_sub_quick(rh, rh, tmp, p)) goto err;
                ^
1353.   			if (!field_mul(group, rh, rh, &point->X, ctx)) goto err;
1354.   			}

crypto/bn/bn_mod.c:170:7: Call
  168.   int BN_mod_sub_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m)
  169.   	{
  170.   	if (!BN_sub(r, a, b)) return 0;
               ^
  171.   	if (r->neg)
  172.   		return BN_add(r, r, m);

crypto/bn/bn_add.c:263:1: Parameter `a->top`
    261.   	}
    262.   
    263. > int BN_sub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
    264.   	{
    265.   	size_t max;

crypto/ec/ecp_smpl.c:1364:8: Call
1362.   		/* rh := rh + b*Z^6 */
1363.   		if (!field_mul(group, tmp, &group->b, Z6, ctx)) goto err;
1364.   		if (!BN_mod_add_quick(rh, rh, tmp, p)) goto err;
               ^
1365.   		}
1366.   	else

crypto/bn/bn_mod.c:150:1: Parameter `a->top`
  148.   /* BN_mod_add variant that may be used if both  a  and  b  are non-negative
  149.    * and less than  m */
  150. > int BN_mod_add_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m)
  151.   	{
  152.   	if (!BN_uadd(r, a, b)) return 0;

crypto/bn/bn_mod.c:152:7: Call
  150.   int BN_mod_add_quick(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m)
  151.   	{
  152.   	if (!BN_uadd(r, a, b)) return 0;
               ^
  153.   	if (BN_ucmp(r, m) >= 0)
  154.   		return BN_usub(r, r, m);

crypto/bn/bn_add.c:105:1: Parameter `b->top`
    103.   
    104.   /* unsigned add of b to a */
    105. > int BN_uadd(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
    106.   	{
    107.   	size_t max,min,dif;

crypto/ec/ecp_smpl.c:1380:14: Call
1378.   	if (!field_sqr(group, tmp, &point->Y, ctx)) goto err;
1379.   
1380.   	ret = (0 == BN_ucmp(tmp, rh));
                     ^
1381.   
1382.    err:

crypto/bn/bn_lib.c:656:1: <LHS trace>
654.   	}
655.   
656. > int BN_ucmp(const BIGNUM *a, const BIGNUM *b)
657.   	{
658.   	int i;

crypto/bn/bn_lib.c:656:1: Parameter `a->top`
  654.   	}
  655.   
  656. > int BN_ucmp(const BIGNUM *a, const BIGNUM *b)
  657.   	{
  658.   	int i;

crypto/bn/bn_lib.c:668:7: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_ucmp` 
  666.   	ap=a->d;
  667.   	bp=b->d;
  668.   	for (i=a->top-1; i>=0; i--)
               ^
  669.   		{
  670.   		t1= ap[i];
