crypto/bn/bn_mont.c:224: error: INTEGER_OVERFLOW_L2
  ([-`*mont->N.d`, +oo] - 1):unsigned64 by call to `BN_usub`.
Showing all 6 steps of the trace


crypto/bn/bn_mont.c:146:3: Assignment
144.   #if 1
145.   	for (i=r->top; i<max; i++) /* memset? XXX */
146.   		r->d[i]=0;
         ^
147.   #else
148.   	memset(&(r->d[r->top]),0,(max-r->top)*sizeof(BN_ULONG)); 

crypto/bn/bn_mont.c:224:3: Call
222.   	if (BN_ucmp(ret, &(mont->N)) >= 0)
223.   		{
224.   		BN_usub(ret,ret,&(mont->N));
         ^
225.   		}
226.   	retn=1;

crypto/bn/bn_add.c:167:1: <LHS trace>
165.   
166.   /* unsigned subtraction of b from a, a must be larger than b. */
167. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
168.   	{
169.   	int max,min;

crypto/bn/bn_add.c:167:1: Parameter `*a->d`
  165.   
  166.   /* unsigned subtraction of b from a, a must be larger than b. */
  167. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  168.   	{
  169.   	int max,min;

crypto/bn/bn_add.c:197:3: Assignment
  195.   	for (i=0; i<min; i++)
  196.   		{
  197.   		t1= *(ap++);
           ^
  198.   		t2= *(bp++);
  199.   		if (carry)

crypto/bn/bn_add.c:202:4: Binary operation: ([-*mont->N.d, +oo] - 1):unsigned64 by call to `BN_usub` 
  200.   			{
  201.   			carry=(t1 <= t2);
  202.   			t1=(t1-t2-1)&BN_MASK2;
            ^
  203.   			}
  204.   		else
