crypto/ec/ecp_smpl.c:326: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_lshift`.
Showing all 6 steps of the trace


crypto/ec/ecp_smpl.c:325:8: Call
323.   		{
324.   		if (!BN_mod_sqr(tmp_1, a, p, ctx)) goto err;
325.   		if (!BN_mod_mul(tmp_2, tmp_1, a, p, ctx)) goto err;
              ^
326.   		if (!BN_lshift(tmp_1, tmp_2, 2)) goto err;
327.   		/* tmp_1 = 4*a^3 */

crypto/bn/bn_mod.c:178:1: Parameter `r->top`
  176.   
  177.   /* slow but works */
  178. > int BN_mod_mul(BIGNUM *r, const BIGNUM *a, const BIGNUM *b, const BIGNUM *m,
  179.   	BN_CTX *ctx)
  180.   	{

crypto/ec/ecp_smpl.c:326:8: Call
324.   		if (!BN_mod_sqr(tmp_1, a, p, ctx)) goto err;
325.   		if (!BN_mod_mul(tmp_2, tmp_1, a, p, ctx)) goto err;
326.   		if (!BN_lshift(tmp_1, tmp_2, 2)) goto err;
              ^
327.   		/* tmp_1 = 4*a^3 */
328.   

crypto/bn/bn_shift.c:132:1: <LHS trace>
130.   	}
131.   
132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
133.   	{
134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:132:1: Parameter `a->top`
  130.   	}
  131.   
  132. > int BN_lshift(BIGNUM *r, const BIGNUM *a, int n)
  133.   	{
  134.   	int i,nw,lb,rb;

crypto/bn/bn_shift.c:150:8: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_lshift` 
  148.   	t[a->top+nw]=0;
  149.   	if (lb == 0)
  150.   		for (i=a->top-1; i>=0; i--)
                ^
  151.   			t[nw+i]=f[i];
  152.   	else
