announced length of x is set based on the actual bit size of the input, // ignoring leading zeroes. func (x *Nat) resetToBytes(b []byte) *Nat { x.reset((len(b) + _S - 1) / _S) if err := x.setBytes(b); err != nil { panic("bigmod: internal error: bad arithmetic") } return x.trim() } // trim reduces the size of x to match its value. func (x *Nat) trim() *Nat { // Trim most significant (trailing in little-endian) zero limbs. // We assume comparison with zero (but not the branch) is constant time. for i :=...

    9 and CUDA 9.1 sometimes does not properly compute the carry bit when
    decomposing 64-bit address calculations with large offsets (e.g. `load [x +
    large_constant]`) into 32-bit arithmetic in SASS.

    As a result, these versions of `ptxas` miscompile most XLA programs which
    use more than 4GB of temp memory. This results in garbage results and/or
    `CUDA_ERROR_ILLEGAL_ADDRESS` failures.