crypto/bn/bn_recp.c:157: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `BN_usub`.
Showing all 7 steps of the trace


crypto/bn/bn_recp.c:137:10: Call
135.        *    = |m/N|
136.        */
137.       if (!BN_rshift(a, m, recp->num_bits))
                ^
138.           goto err;
139.       if (!BN_mul(b, a, &(recp->Nr), ctx))

crypto/bn/bn_shift.c:120:1: Parameter `*r->d`
  118.   }
  119.   
  120. > int BN_rshift(BIGNUM *r, const BIGNUM *a, int n)
  121.   {
  122.       int i, j, nw, lb, rb;

crypto/bn/bn_recp.c:157:14: Call
155.               goto err;
156.           }
157.           if (!BN_usub(r, r, &(recp->N)))
                    ^
158.               goto err;
159.           if (!BN_add_word(d, 1))

crypto/bn/bn_add.c:117:1: <LHS trace>
115.   
116.   /* unsigned subtraction of b from a, a must be larger than b. */
117. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
118.   {
119.       int max, min, dif;

crypto/bn/bn_add.c:117:1: Parameter `*a->d`
  115.   
  116.   /* unsigned subtraction of b from a, a must be larger than b. */
  117. > int BN_usub(BIGNUM *r, const BIGNUM *a, const BIGNUM *b)
  118.   {
  119.       int max, min, dif;

crypto/bn/bn_add.c:169:13: Assignment
  167.           while (dif) {
  168.               dif--;
  169.               t1 = *(ap++);
                     ^
  170.               t2 = (t1 - 1) & BN_MASK2;
  171.               *(rp++) = t2;

crypto/bn/bn_add.c:170:13: Binary operation: ([0, +oo] - 1):unsigned64 by call to `BN_usub` 
  168.               dif--;
  169.               t1 = *(ap++);
  170.               t2 = (t1 - 1) & BN_MASK2;
                     ^
  171.               *(rp++) = t2;
  172.               if (t1)
