crypto/bn/bn_rand.c:343: error: INTEGER_OVERFLOW_L2
  (128 - [113, 506]):unsigned64 by call to `SHA512_Final`.
Showing all 16 steps of the trace


crypto/bn/bn_rand.c:338:9: Call
336.           if (RAND_bytes(random_bytes, sizeof(random_bytes)) != 1)
337.               goto err;
338.           SHA512_Init(&sha);
               ^
339.           SHA512_Update(&sha, &done, sizeof(done));
340.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));

crypto/sha/sha512.c:91:5: Assignment
  89.       c->Nl = 0;
  90.       c->Nh = 0;
  91.       c->num = 0;
            ^
  92.       c->md_len = SHA512_DIGEST_LENGTH;
  93.       return 1;

crypto/bn/bn_rand.c:339:9: Call
337.               goto err;
338.           SHA512_Init(&sha);
339.           SHA512_Update(&sha, &done, sizeof(done));
               ^
340.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
341.           SHA512_Update(&sha, message, message_len);

crypto/sha/sha512.c:185:1: Parameter `c->num`
  183.   }
  184.   
  185. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  186.   {
  187.       SHA_LONG64 l;

crypto/bn/bn_rand.c:340:9: Call
338.           SHA512_Init(&sha);
339.           SHA512_Update(&sha, &done, sizeof(done));
340.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
               ^
341.           SHA512_Update(&sha, message, message_len);
342.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));

crypto/sha/sha512.c:185:1: Parameter `c->num`
  183.   }
  184.   
  185. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  186.   {
  187.       SHA_LONG64 l;

crypto/bn/bn_rand.c:341:9: Call
339.           SHA512_Update(&sha, &done, sizeof(done));
340.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
341.           SHA512_Update(&sha, message, message_len);
               ^
342.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
343.           SHA512_Final(digest, &sha);

crypto/sha/sha512.c:185:1: Parameter `c->num`
  183.   }
  184.   
  185. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  186.   {
  187.       SHA_LONG64 l;

crypto/bn/bn_rand.c:342:9: Call
340.           SHA512_Update(&sha, private_bytes, sizeof(private_bytes));
341.           SHA512_Update(&sha, message, message_len);
342.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
               ^
343.           SHA512_Final(digest, &sha);
344.   

crypto/sha/sha512.c:185:1: Parameter `c->num`
  183.   }
  184.   
  185. > int SHA512_Update(SHA512_CTX *c, const void *_data, size_t len)
  186.   {
  187.       SHA_LONG64 l;

crypto/bn/bn_rand.c:343:9: Call
341.           SHA512_Update(&sha, message, message_len);
342.           SHA512_Update(&sha, random_bytes, sizeof(random_bytes));
343.           SHA512_Final(digest, &sha);
               ^
344.   
345.           todo = num_k_bytes - done;

crypto/sha/sha512.c:101:1: <RHS trace>
99.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
100.   
101. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
102.   {
103.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:101:1: Parameter `c->num`
  99.   void sha512_block_data_order(SHA512_CTX *ctx, const void *in, size_t num);
  100.   
  101. > int SHA512_Final(unsigned char *md, SHA512_CTX *c)
  102.   {
  103.       unsigned char *p = (unsigned char *)c->u.p;

crypto/sha/sha512.c:104:5: Assignment
  102.   {
  103.       unsigned char *p = (unsigned char *)c->u.p;
  104.       size_t n = c->num;
             ^
  105.   
  106.       p[n] = 0x80;                /* There always is a room for one */

crypto/sha/sha512.c:107:5: Assignment
  105.   
  106.       p[n] = 0x80;                /* There always is a room for one */
  107.       n++;
             ^
  108.       if (n > (sizeof(c->u) - 16)) {
  109.           memset(p + n, 0, sizeof(c->u) - n);

crypto/sha/sha512.c:109:9: Binary operation: (128 - [113, 506]):unsigned64 by call to `SHA512_Final` 
  107.       n++;
  108.       if (n > (sizeof(c->u) - 16)) {
  109.           memset(p + n, 0, sizeof(c->u) - n);
                 ^
  110.           n = 0;
  111.           sha512_block_data_order(c, p, 1);
