crypto/ec/curve448/curve448.c:358: error: INTEGER_OVERFLOW_L2
  ([0, `*enc`] - 1):unsigned64 by call to `word_is_zero`.
Showing all 5 steps of the trace


crypto/ec/curve448/curve448.c:343:1: Parameter `*enc`
341.   }
342.   
343. > c448_error_t curve448_point_decode_like_eddsa_and_mul_by_ratio(
344.                                   curve448_point_t p,
345.                                   const uint8_t enc[EDDSA_448_PUBLIC_BYTES])

crypto/ec/curve448/curve448.c:358:13: Call
356.       succ = gf_deserialize(p->y, enc2, 1, 0);
357.   #if 0 == 0
358.       succ &= word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1]);
                   ^
359.   #endif
360.   

crypto/ec/curve448/arch_32/arch_intrinsics.h:18:1: <LHS trace>
16.   # define ARCH_WORD_BITS 32
17.   
18. > static ossl_inline uint32_t word_is_zero(uint32_t a)
19.   {
20.       /* let's hope the compiler isn't clever enough to optimize this. */

crypto/ec/curve448/arch_32/arch_intrinsics.h:18:1: Parameter `a`
  16.   # define ARCH_WORD_BITS 32
  17.   
  18. > static ossl_inline uint32_t word_is_zero(uint32_t a)
  19.   {
  20.       /* let's hope the compiler isn't clever enough to optimize this. */

crypto/ec/curve448/arch_32/arch_intrinsics.h:21:5: Binary operation: ([0, *enc] - 1):unsigned64 by call to `word_is_zero` 
  19.   {
  20.       /* let's hope the compiler isn't clever enough to optimize this. */
  21.       return (((uint64_t)a) - 1) >> 32;
            ^
  22.   }
  23.   
