crypto/jpake/jpake.c:175: error: INTEGER_OVERFLOW_L2
  ([0, `p->zkpx.gr->top`] - 1):unsigned64 by call to `hashbn`.
Showing all 7 steps of the trace


crypto/jpake/jpake.c:162:1: Parameter `p->zkpx.gr->top`
160.   
161.   /* h=hash(g, g^r, g^x, name) */
162. > static void zkp_hash(BIGNUM *h, const BIGNUM *zkpg, const JPAKE_STEP_PART *p,
163.   		     const char *proof_name)
164.       {

crypto/jpake/jpake.c:175:5: Call
173.       hashbn(&sha, zkpg);
174.       OPENSSL_assert(!BN_is_zero(p->zkpx.gr));
175.       hashbn(&sha, p->zkpx.gr);
           ^
176.       hashbn(&sha, p->gx);
177.       hashstring(&sha, proof_name);

crypto/jpake/jpake.c:150:1: Parameter `bn->top`
  148.       }
  149.   
  150. > static void hashbn(SHA_CTX *sha, const BIGNUM *bn)
  151.       {
  152.       size_t l = BN_num_bytes(bn);

crypto/jpake/jpake.c:152:16: Call
  150.   static void hashbn(SHA_CTX *sha, const BIGNUM *bn)
  151.       {
  152.       size_t l = BN_num_bytes(bn);
                        ^
  153.       unsigned char *bin = OPENSSL_malloc(l);
  154.   

crypto/bn/bn_lib.c:248:1: <LHS trace>
246.   	}
247.   
248. > int BN_num_bits(const BIGNUM *a)
249.   	{
250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
    246.   	}
    247.   
    248. > int BN_num_bits(const BIGNUM *a)
    249.   	{
    250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:250:2: Binary operation: ([0, p->zkpx.gr->top] - 1):unsigned64 by call to `hashbn` 
    248.   int BN_num_bits(const BIGNUM *a)
    249.   	{
    250.   	int i = a->top - 1;
            ^
    251.   	bn_check_top(a);
    252.   
