crypto/rsa/rsa_pmeth.c:329: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pmeth.c:319:14: Call
317.       if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
318.           int i;
319.           if (!setup_tbuf(rctx, ctx))
                    ^
320.               return -1;
321.           ret = RSA_private_decrypt(inlen, in, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:101:17: Call
  99.       if (ctx->tbuf != NULL)
  100.           return 1;
  101.       ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey));
                         ^
  102.       if (ctx->tbuf == NULL)
  103.           return 0;

crypto/mem.c:76:16: Unknown value from: non-const function
    74.   
    75.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
    76.           return malloc_impl(num, file, line);
                         ^
    77.   
    78.       if (num <= 0)

crypto/rsa/rsa_pmeth.c:329:15: Call
327.                   break;
328.           }
329.           ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf + i,
                     ^
330.                                                   ret - i, ret,
331.                                                   rctx->oaep_label,

crypto/rsa/rsa_oaep.c:115:1: Parameter `*from`
  113.   }
  114.   
  115. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  116.                                         const unsigned char *from, int flen,
  117.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:176:12: Call
  174.        * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  175.        */
  176.       good = constant_time_is_zero(em[0]);
                    ^
  177.   
  178.       maskedseed = em + 1;

include/internal/constant_time_locl.h:150:1: <LHS trace>
148.   }
149.   
150. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
151.   {
152.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:150:1: Parameter `a`
    148.   }
    149.   
    150. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    151.   {
    152.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:152:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    150.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    151.   {
    152.       return constant_time_msb(~a & (a - 1));
                      ^
    153.   }
    154.   
