crypto/rsa/rsa_ssl.c:125: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 8):unsigned32 by call to `constant_time_ge`.
Showing all 9 steps of the trace


crypto/rsa/rsa_ssl.c:103:5: Assignment
101.       /* scan over padding data */
102.       found_zero_byte = 0;
103.       threes_in_row = 0;
           ^
104.       for (i = 2; i < num; i++) {
105.           unsigned int equals0 = constant_time_is_zero(em[i]);

crypto/rsa/rsa_ssl.c:125:13: Call
123.       mask = ~good;
124.   
125.       good &= constant_time_ge(threes_in_row, 8);
                   ^
126.       err = constant_time_select_int(mask | good, err,
127.                                      RSA_R_SSLV3_ROLLBACK_ATTACK);

include/internal/constant_time_locl.h:142:1: Parameter `a`
  140.   }
  141.   
  142. > static ossl_inline unsigned int constant_time_ge(unsigned int a,
  143.                                                    unsigned int b)
  144.   {

include/internal/constant_time_locl.h:145:13: Call
  143.                                                    unsigned int b)
  144.   {
  145.       return ~constant_time_lt(a, b);
                     ^
  146.   }
  147.   

include/internal/constant_time_locl.h:120:1: <LHS trace>
118.   }
119.   
120. > static ossl_inline unsigned int constant_time_lt(unsigned int a,
121.                                                    unsigned int b)
122.   {

include/internal/constant_time_locl.h:120:1: Parameter `a`
    118.   }
    119.   
    120. > static ossl_inline unsigned int constant_time_lt(unsigned int a,
    121.                                                    unsigned int b)
    122.   {

include/internal/constant_time_locl.h:120:1: <RHS trace>
118.   }
119.   
120. > static ossl_inline unsigned int constant_time_lt(unsigned int a,
121.                                                    unsigned int b)
122.   {

include/internal/constant_time_locl.h:120:1: Parameter `b`
    118.   }
    119.   
    120. > static ossl_inline unsigned int constant_time_lt(unsigned int a,
    121.                                                    unsigned int b)
    122.   {

include/internal/constant_time_locl.h:123:12: Binary operation: ([0, +oo] - 8):unsigned32 by call to `constant_time_ge` 
    121.                                                    unsigned int b)
    122.   {
    123.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
                      ^
    124.   }
    125.   
