crypto/ec/curve448/constant_time.h:214: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `word_is_zero`.
Showing all 5 steps of the trace


crypto/ec/curve448/constant_time.h:164:1: Parameter `idx`
162.    * The table and output must not alias.
163.    */
164. > static ossl_inline void constant_time_lookup(void *RESTRICT out_,
165.                                                const void *table_,
166.                                                word_t elem_bytes,

crypto/ec/curve448/constant_time.h:214:16: Call
212.           }
213.   
214.           mask = word_is_zero(idx ^ j);
                      ^
215.   # ifndef HAS_UNALIGNED_STRUCTS
216.           maskc = (unsigned char)mask;

crypto/ec/curve448/arch_32/arch_intrinsics.h:18:1: <LHS trace>
16.   # define ARCH_WORD_BITS 32
17.   
18. > static ossl_inline uint32_t word_is_zero(uint32_t a)
19.   {
20.       /* let's hope the compiler isn't clever enough to optimize this. */

crypto/ec/curve448/arch_32/arch_intrinsics.h:18:1: Parameter `a`
  16.   # define ARCH_WORD_BITS 32
  17.   
  18. > static ossl_inline uint32_t word_is_zero(uint32_t a)
  19.   {
  20.       /* let's hope the compiler isn't clever enough to optimize this. */

crypto/ec/curve448/arch_32/arch_intrinsics.h:21:5: Binary operation: ([0, +oo] - 1):unsigned64 by call to `word_is_zero` 
  19.   {
  20.       /* let's hope the compiler isn't clever enough to optimize this. */
  21.       return (((uint64_t)a) - 1) >> 32;
            ^
  22.   }
  23.   
