engines/ccgost/gost_pmeth.c:260: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `gost_sign_keygen`.
Showing all 25 steps of the trace


engines/ccgost/gost_pmeth.c:255:7: Call
253.   		}
254.   	dsa = DSA_new();
255.   	if (!fill_GOST94_params(dsa,data->sign_param_nid))
             ^
256.   		{
257.   		DSA_free(dsa);

engines/ccgost/gost_sign.c:227:2: Call
  225.   	if (dsa->p) { BN_free(dsa->p); }
  226.   	dsa->p=NULL;
  227.   	BN_dec2bn(&(dsa->p),params->p);
          ^
  228.   	if (dsa->q) { BN_free(dsa->q); }
  229.   	dsa->q=NULL;

crypto/bn/bn_print.c:239:1: Parameter `(*bn)->top`
    237.   	}
    238.   
    239. > int BN_dec2bn(BIGNUM **bn, const char *a)
    240.   	{
    241.   	BIGNUM *ret=NULL;

engines/ccgost/gost_sign.c:230:2: Call
  228.   	if (dsa->q) { BN_free(dsa->q); }
  229.   	dsa->q=NULL;
  230.   	BN_dec2bn(&(dsa->q),params->q);
          ^
  231.   	if (dsa->g) { BN_free(dsa->g); }
  232.   	dsa->g=NULL;

crypto/bn/bn_print.c:239:1: Parameter `(*bn)->top`
    237.   	}
    238.   
    239. > int BN_dec2bn(BIGNUM **bn, const char *a)
    240.   	{
    241.   	BIGNUM *ret=NULL;

engines/ccgost/gost_sign.c:233:2: Call
  231.   	if (dsa->g) { BN_free(dsa->g); }
  232.   	dsa->g=NULL;
  233.   	BN_dec2bn(&(dsa->g),params->a);
          ^
  234.   	return 1;
  235.   	}	

crypto/bn/bn_print.c:239:1: Parameter `(*bn)->top`
    237.   	}
    238.   
    239. > int BN_dec2bn(BIGNUM **bn, const char *a)
    240.   	{
    241.   	BIGNUM *ret=NULL;

engines/ccgost/gost_pmeth.c:260:2: Call
258.   		return 0;
259.   		}
260.   	gost_sign_keygen(dsa);
        ^
261.   	EVP_PKEY_assign(pkey,NID_id_GostR3410_94,dsa);
262.   	return 1;

engines/ccgost/gost_sign.c:242:1: Parameter `dsa->g->top`
  240.    *
  241.    */
  242. > int gost_sign_keygen(DSA *dsa)
  243.   	{
  244.   	dsa->priv_key = BN_new();

engines/ccgost/gost_sign.c:246:9: Call
  244.   	dsa->priv_key = BN_new();
  245.   	BN_rand_range(dsa->priv_key,dsa->q);
  246.   	return gost94_compute_public( dsa);
                 ^
  247.   	}
  248.   

engines/ccgost/gost_sign.c:194:1: Parameter `dsa->g->top`
    192.    *
    193.    */
    194. > int gost94_compute_public(DSA *dsa)
    195.   	{
    196.   	/* Now fill algorithm parameters with correct values */

engines/ccgost/gost_sign.c:205:2: Call
    203.   	/* Compute public key  y = a^x mod p */
    204.   	dsa->pub_key=BN_new();
    205.   	BN_mod_exp(dsa->pub_key, dsa->g,dsa->priv_key,dsa->p,ctx);
            ^
    206.   	BN_CTX_free(ctx);
    207.   	return 1;

crypto/bn/bn_exp.c:163:1: Parameter `a->top`
      161.   
      162.   
      163. > int BN_mod_exp(BIGNUM *r, const BIGNUM *a, const BIGNUM *p, const BIGNUM *m,
      164.   	       BN_CTX *ctx)
      165.   	{

crypto/bn/bn_exp.c:223:8: Call
      221.   		else
      222.   #  endif
      223.   			ret=BN_mod_exp_mont(r,a,p,m,ctx,NULL);
                    ^
      224.   		}
      225.   	else

crypto/bn/bn_exp.c:371:1: Parameter `a->top`
        369.   
        370.   
        371. > int BN_mod_exp_mont(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
        372.   		    const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *in_mont)
        373.   	{

crypto/bn/bn_exp.c:384:10: Call
        382.   	if (BN_get_flags(p, BN_FLG_CONSTTIME) != 0)
        383.   		{
        384.   		return BN_mod_exp_mont_consttime(rr, a, p, m, ctx, in_mont);
                        ^
        385.   		}
        386.   

crypto/bn/bn_exp.c:574:1: Parameter `a->top`
          572.    * http://www.daemonology.net/hyperthreading-considered-harmful/)
          573.    */
          574. > int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
          575.   		    const BIGNUM *m, BN_CTX *ctx, BN_MONT_CTX *in_mont)
          576.   	{

crypto/bn/bn_exp.c:650:8: Call
          648.   	if (a->neg || BN_ucmp(a,m) >= 0)
          649.   		{
          650.   		if (!BN_mod(am,a,m,ctx))
                        ^
          651.   			goto err;
          652.   		aa= am;

crypto/bn/bn_div.c:181:1: Parameter `num->top`
            179.   static int BN_div_no_branch(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num,
            180.           const BIGNUM *divisor, BN_CTX *ctx);
            181. > int BN_div(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, const BIGNUM *divisor,
            182.   	   BN_CTX *ctx)
            183.   	{

crypto/bn/bn_div.c:204:10: Call
            202.   	if ((BN_get_flags(num, BN_FLG_CONSTTIME) != 0) || (BN_get_flags(divisor, BN_FLG_CONSTTIME) != 0))
            203.   		{
            204.   		return BN_div_no_branch(dv, rm, num, divisor, ctx);
                            ^
            205.   		}
            206.   

crypto/bn/bn_div.c:426:1: Parameter `num->top`
              424.    * branches that may leak sensitive information.
              425.    */
              426. > static int BN_div_no_branch(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, 
              427.   	const BIGNUM *divisor, BN_CTX *ctx)
              428.   	{

crypto/bn/bn_div.c:460:8: Call
              458.   	sdiv->neg=0;
              459.   	norm_shift+=BN_BITS2;
              460.   	if (!(BN_lshift(snum,num,norm_shift))) goto err;
                            ^
              461.   	snum->neg=0;
              462.   

crypto/bn/bn_shift.c:132:1: <LHS trace>
130.   	}
131.   
132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
133.   	{
134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:132:1: Parameter `a->top`
                130.   	}
                131.   
                132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
                133.   	{
                134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:150:8: Binary operation: ([0, +oo] - 1):unsigned64 by call to `gost_sign_keygen` 
                148.   	t[a->top+nw]=0;
                149.   	if (lb == 0)
                150.   		for (i=a->top-1; i>=0; i--)
                              ^
                151.   			t[nw+i]=f[i];
                152.   	else
