crypto/rsa/rsa_ssl.c:96: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 6 steps of the trace


crypto/rsa/rsa_ssl.c:61:1: Parameter `*from`
59.    * preserves error code reporting for backward compatibility.
60.    */
61. > int RSA_padding_check_SSLv23(unsigned char *to, int tlen,
62.                                const unsigned char *from, int flen, int num)
63.   {

crypto/rsa/rsa_ssl.c:93:9: Assignment
91.           flen -= 1 & mask;
92.           from -= 1 & mask;
93.           *--em = *from & mask;
              ^
94.       }
95.   

crypto/rsa/rsa_ssl.c:96:12: Call
94.       }
95.   
96.       good = constant_time_is_zero(em[0]);
                 ^
97.       good &= constant_time_eq(em[1], 2);
98.       err = constant_time_select_int(good, 0, RSA_R_BLOCK_TYPE_IS_NOT_02);

include/internal/constant_time_locl.h:164:1: <LHS trace>
162.   }
163.   
164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
165.   {
166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:164:1: Parameter `a`
  162.   }
  163.   
  164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  164.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));
                    ^
  167.   }
  168.   
