crypto/ec/curve448/curve448.c:334: error: INTEGER_OVERFLOW_L2
  ([0, `*enc`] - 1):unsigned32 by call to `constant_time_is_zero_32`.
Showing all 5 steps of the trace


crypto/ec/curve448/curve448.c:320:1: Parameter `*enc`
318.   }
319.   
320. > c448_error_t curve448_point_decode_like_eddsa_and_mul_by_ratio(
321.                                   curve448_point_t p,
322.                                   const uint8_t enc[EDDSA_448_PUBLIC_BYTES])

crypto/ec/curve448/curve448.c:334:13: Call
332.   
333.       succ = gf_deserialize(p->y, enc2, 1, 0);
334.       succ &= word_is_zero(enc2[EDDSA_448_PRIVATE_BYTES - 1]);
                   ^
335.   
336.       gf_sqr(p->x, p->y);

include/internal/constant_time_locl.h:183:1: <LHS trace>
181.   }
182.   
183. > static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
184.   {
185.       return constant_time_msb_32(~a & (a - 1));

include/internal/constant_time_locl.h:183:1: Parameter `a`
  181.   }
  182.   
  183. > static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
  184.   {
  185.       return constant_time_msb_32(~a & (a - 1));

include/internal/constant_time_locl.h:185:12: Binary operation: ([0, *enc] - 1):unsigned32 by call to `constant_time_is_zero_32` 
  183.   static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
  184.   {
  185.       return constant_time_msb_32(~a & (a - 1));
                    ^
  186.   }
  187.   
