crypto/rsa/rsa_oaep.c:190: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 7 steps of the trace


crypto/rsa/rsa_oaep.c:190:35: Call
188.           goto cleanup;
189.   
190.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                                         ^
191.   
192.       found_one_byte = 0;

crypto/cryptlib.c:475:5: Assignment
  473.       const volatile unsigned char *a = in_a;
  474.       const volatile unsigned char *b = in_b;
  475.       unsigned char x = 0;
             ^
  476.   
  477.       for (i = 0; i < len; i++)

crypto/cryptlib.c:480:5: Assignment
  478.           x |= a[i] ^ b[i];
  479.   
  480.       return x;
             ^
  481.   }

crypto/rsa/rsa_oaep.c:190:13: Call
188.           goto cleanup;
189.   
190.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                   ^
191.   
192.       found_one_byte = 0;

include/internal/constant_time_locl.h:165:1: <LHS trace>
163.   }
164.   
165. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
166.   {
167.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:165:1: Parameter `a`
  163.   }
  164.   
  165. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  166.   {
  167.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:167:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  165.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  166.   {
  167.       return constant_time_msb(~a & (a - 1));
                    ^
  168.   }
  169.   
