crypto/bn/bn_exp.c:841: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_to_montgomery`.
Showing all 19 steps of the trace


crypto/bn/bn_exp.c:693:1: Parameter `ctx->stack.depth`
691.    * http://www.daemonology.net/hyperthreading-considered-harmful/)
692.    */
693. > int BN_mod_exp_mont_consttime(BIGNUM *rr, const BIGNUM *a, const BIGNUM *p,
694.                                 const BIGNUM *m, BN_CTX *ctx,
695.                                 BN_MONT_CTX *in_mont)

crypto/bn/bn_exp.c:733:5: Call
731.       }
732.   
733.       BN_CTX_start(ctx);
           ^
734.   
735.       /*

crypto/bn/bn_ctx.c:227:1: Parameter `ctx->stack.depth`
  225.   }
  226.   
  227. > void BN_CTX_start(BN_CTX *ctx)
  228.   {
  229.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_exp.c:841:10: Call
839.       } else
840.   #endif
841.       if (!BN_to_montgomery(&tmp, BN_value_one(), mont, ctx))
                ^
842.           goto err;
843.   

crypto/bn/bn_lib.c:996:1: Parameter `ctx->stack.depth`
  994.   }
  995.   
  996. > int BN_to_montgomery(BIGNUM *r, const BIGNUM *a, BN_MONT_CTX *mont,
  997.                        BN_CTX *ctx)
  998.   {

crypto/bn/bn_lib.c:999:12: Call
  997.                        BN_CTX *ctx)
  998.   {
  999.       return BN_mod_mul_montgomery(r, a, &(mont->RR), mont, ctx);
                     ^
  1000.   }
  1001.   

crypto/bn/bn_mont.c:127:1: Parameter `ctx->stack.depth`
    125.   #endif
    126.   
    127. > int BN_mod_mul_montgomery(BIGNUM *r, const BIGNUM *a, const BIGNUM *b,
    128.                             BN_MONT_CTX *mont, BN_CTX *ctx)
    129.   {

crypto/bn/bn_mont.c:147:5: Call
    145.   #endif
    146.   
    147.       BN_CTX_start(ctx);
               ^
    148.       tmp = BN_CTX_get(ctx);
    149.       if (tmp == NULL)

crypto/bn/bn_ctx.c:227:1: Parameter `ctx->stack.depth`
      225.   }
      226.   
      227. > void BN_CTX_start(BN_CTX *ctx)
      228.   {
      229.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_mont.c:154:14: Call
    152.       bn_check_top(tmp);
    153.       if (a == b) {
    154.           if (!BN_sqr(tmp, a, ctx))
                        ^
    155.               goto err;
    156.       } else {

crypto/bn/bn_sqr.c:65:1: Parameter `ctx->stack.depth`
      63.    * I've just gone over this and it is now %20 faster on x86 - eay - 27 Jun 96
      64.    */
      65. > int BN_sqr(BIGNUM *r, const BIGNUM *a, BN_CTX *ctx)
      66.   {
      67.       int max, al;

crypto/bn/bn_sqr.c:80:5: Call
      78.       }
      79.   
      80.       BN_CTX_start(ctx);
                ^
      81.       rr = (a != r) ? r : BN_CTX_get(ctx);
      82.       tmp = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:227:1: Parameter `ctx->stack.depth`
        225.   }
        226.   
        227. > void BN_CTX_start(BN_CTX *ctx)
        228.   {
        229.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_sqr.c:147:5: Call
      145.       bn_check_top(rr);
      146.       bn_check_top(tmp);
      147.       BN_CTX_end(ctx);
                 ^
      148.       return (ret);
      149.   }

crypto/bn/bn_ctx.c:241:1: Parameter `ctx->stack.depth`
        239.   }
        240.   
        241. > void BN_CTX_end(BN_CTX *ctx)
        242.   {
        243.       CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:247:27: Call
        245.           ctx->err_stack--;
        246.       else {
        247.           unsigned int fp = BN_STACK_pop(&ctx->stack);
                                         ^
        248.           /* Does this stack frame have anything to release? */
        249.           if (fp < ctx->used)

crypto/bn/bn_ctx.c:317:1: <LHS trace>
315.   }
316.   
317. > static unsigned int BN_STACK_pop(BN_STACK *st)
318.   {
319.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:317:1: Parameter `st->depth`
          315.   }
          316.   
          317. > static unsigned int BN_STACK_pop(BN_STACK *st)
          318.   {
          319.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:319:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_to_montgomery` 
          317.   static unsigned int BN_STACK_pop(BN_STACK *st)
          318.   {
          319.       return st->indexes[--(st->depth)];
                            ^
          320.   }
          321.   
