5524     mbedtls_mpi_uint *M = NULL;  in mbedtls_ecp_mod_p448_raw()  local
5527     M = mbedtls_calloc(M_limbs, ciL);  in mbedtls_ecp_mod_p448_raw()
5529     if (M == NULL) {  in mbedtls_ecp_mod_p448_raw()
5541     memset(M, 0, (M_limbs * ciL));  in mbedtls_ecp_mod_p448_raw()
5544     memcpy(M, X + P448_WIDTH, ((M_limbs - 1) * ciL));  in mbedtls_ecp_mod_p448_raw()
5552     (void) mbedtls_mpi_core_add(X, X, M, M_limbs);  in mbedtls_ecp_mod_p448_raw()
5555     memcpy(Q, (char *) M + P224_SIZE, P224_SIZE);  in mbedtls_ecp_mod_p448_raw()
5565     M[P224_WIDTH_MIN] &= ((mbedtls_mpi_uint)-1) >> (P224_UNUSED_BITS);  in mbedtls_ecp_mod_p448_raw()
5567     memset(M + P224_WIDTH_MAX, 0, ((M_limbs - P224_WIDTH_MAX) * ciL));  in mbedtls_ecp_mod_p448_raw()
5570     (void) mbedtls_mpi_core_add(M, M, Q, Q_limbs);  in mbedtls_ecp_mod_p448_raw()
5574     memmove((char *) M + P224_SIZE, M, P224_SIZE + ciL);  in mbedtls_ecp_mod_p448_raw()
5575     memset(M, 0, P224_SIZE);  in mbedtls_ecp_mod_p448_raw()
5578     (void) mbedtls_mpi_core_add(X, X, M, M_limbs);  in mbedtls_ecp_mod_p448_raw()
5587         memset(M, 0, (M_limbs * ciL));  in mbedtls_ecp_mod_p448_raw()
5588         memcpy(M, X + P448_WIDTH, ((M_limbs - 1) * ciL));  in mbedtls_ecp_mod_p448_raw()
5602         M[P224_WIDTH_MIN] = M[0] << (224 & (biL - 1));  in mbedtls_ecp_mod_p448_raw()
5605         (void) mbedtls_mpi_core_add(X, X, M, M_limbs);  in mbedtls_ecp_mod_p448_raw()
5611     mbedtls_free(M);  in mbedtls_ecp_mod_p448_raw()
5653     mbedtls_mpi_uint *M = mbedtls_calloc(M_limbs, ciL);  in ecp_mod_koblitz()  local
5654     if (M == NULL) {  in ecp_mod_koblitz()
5690         mbedtls_mpi_core_mul(M, A1, P_limbs, R, R_limbs);  in ecp_mod_koblitz()
5691         (void) mbedtls_mpi_core_add(X, X, M, P_limbs + R_limbs);  in ecp_mod_koblitz()
5702     mbedtls_free(M);  in ecp_mod_koblitz()