crypto/ecdsa/ecs_ossl.c:145: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `BN_generate_dsa_nonce`.
Showing all 13 steps of the trace


crypto/ecdsa/ecs_ossl.c:100:1: Parameter `ctx_in->stack.depth`
98.   }
99.   
100. > static int ecdsa_sign_setup(EC_KEY *eckey, BN_CTX *ctx_in,
101.                               BIGNUM **kinvp, BIGNUM **rp,
102.                               const unsigned char *dgst, int dlen)

crypto/ecdsa/ecs_ossl.c:145:22: Call
143.   #ifndef OPENSSL_NO_SHA512
144.               if (dgst != NULL) {
145.                   if (!BN_generate_dsa_nonce
                            ^
146.                       (k, order, EC_KEY_get0_private_key(eckey), dgst, dlen,
147.                        ctx)) {

crypto/bn/bn_rand.c:301:1: Parameter `ctx->stack.depth`
  299.    * used.
  300.    */
  301. > int BN_generate_dsa_nonce(BIGNUM *out, const BIGNUM *range,
  302.                             const BIGNUM *priv, const unsigned char *message,
  303.                             size_t message_len, BN_CTX *ctx)

crypto/bn/bn_rand.c:356:9: Call
  354.       if (!BN_bin2bn(k_bytes, num_k_bytes, out))
  355.           goto err;
  356.       if (BN_mod(out, out, range, ctx) != 1)
                 ^
  357.           goto err;
  358.       ret = 1;

crypto/bn/bn_div.c:189:1: Parameter `ctx->stack.depth`
    187.    * If 'dv' or 'rm' is NULL, the respective value is not returned.
    188.    */
    189. > int BN_div(BIGNUM *dv, BIGNUM *rm, const BIGNUM *num, const BIGNUM *divisor,
    190.              BN_CTX *ctx)
    191.   {

crypto/bn/bn_div.c:242:5: Call
    240.       }
    241.   
    242.       BN_CTX_start(ctx);
               ^
    243.       tmp = BN_CTX_get(ctx);
    244.       snum = BN_CTX_get(ctx);

crypto/bn/bn_ctx.c:253:1: Parameter `ctx->stack.depth`
      251.   }
      252.   
      253. > void BN_CTX_start(BN_CTX *ctx)
      254.   {
      255.       CTXDBG_ENTRY("BN_CTX_start", ctx);

crypto/bn/bn_div.c:469:5: Call
    467.       if (no_branch)
    468.           bn_correct_top(res);
    469.       BN_CTX_end(ctx);
               ^
    470.       return (1);
    471.    err:

crypto/bn/bn_ctx.c:267:1: Parameter `ctx->stack.depth`
      265.   }
      266.   
      267. > void BN_CTX_end(BN_CTX *ctx)
      268.   {
      269.       CTXDBG_ENTRY("BN_CTX_end", ctx);

crypto/bn/bn_ctx.c:273:27: Call
      271.           ctx->err_stack--;
      272.       else {
      273.           unsigned int fp = BN_STACK_pop(&ctx->stack);
                                       ^
      274.           /* Does this stack frame have anything to release? */
      275.           if (fp < ctx->used)

crypto/bn/bn_ctx.c:351:1: <LHS trace>
349.   }
350.   
351. > static unsigned int BN_STACK_pop(BN_STACK *st)
352.   {
353.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:351:1: Parameter `st->depth`
        349.   }
        350.   
        351. > static unsigned int BN_STACK_pop(BN_STACK *st)
        352.   {
        353.       return st->indexes[--(st->depth)];

crypto/bn/bn_ctx.c:353:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `BN_generate_dsa_nonce` 
        351.   static unsigned int BN_STACK_pop(BN_STACK *st)
        352.   {
        353.       return st->indexes[--(st->depth)];
                          ^
        354.   }
        355.   
