crypto/ec/curve448/scalar.c:165: error: INTEGER_OVERFLOW_L1
  (0 - 1):unsigned32 by call to `constant_time_is_zero_32`.
Showing all 5 steps of the trace


crypto/ec/curve448/scalar.c:156:5: Assignment
154.   {
155.       unsigned int i;
156.       c448_dsword_t accum = 0;
           ^
157.   
158.       scalar_decode_short(s, ser, C448_SCALAR_BYTES);

crypto/ec/curve448/scalar.c:165:29: Call
163.       curve448_scalar_mul(s, s, curve448_scalar_one); /* ham-handed reduce */
164.   
165.       return c448_succeed_if(~word_is_zero((uint32_t)accum));
                                   ^
166.   }
167.   

include/internal/constant_time_locl.h:183:1: <LHS trace>
181.   }
182.   
183. > static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
184.   {
185.       return constant_time_msb_32(~a & (a - 1));

include/internal/constant_time_locl.h:183:1: Parameter `a`
  181.   }
  182.   
  183. > static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
  184.   {
  185.       return constant_time_msb_32(~a & (a - 1));

include/internal/constant_time_locl.h:185:12: Binary operation: (0 - 1):unsigned32 by call to `constant_time_is_zero_32` 
  183.   static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
  184.   {
  185.       return constant_time_msb_32(~a & (a - 1));
                    ^
  186.   }
  187.   
