crypto/crmf/crmf_lib.c:701: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 7 steps of the trace


crypto/crmf/crmf_lib.c:697:18: Call
695.                   || (ek = OPENSSL_malloc(eksize)) == NULL)
696.               goto oom;
697.           retval = EVP_PKEY_decrypt(pkctx, ek, &eksize,
                        ^
698.                                     encKey->data, encKey->length);
699.           ERR_clear_error(); /* error state may have sensitive information */

crypto/evp/pmeth_fn.c:551:9: Assignment
  549.           EVPerr(EVP_F_EVP_PKEY_DECRYPT,
  550.                  EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE);
  551.           return -2;
                 ^
  552.       }
  553.       if (ctx->operation != EVP_PKEY_OP_DECRYPT) {

crypto/crmf/crmf_lib.c:697:9: Assignment
695.                   || (ek = OPENSSL_malloc(eksize)) == NULL)
696.               goto oom;
697.           retval = EVP_PKEY_decrypt(pkctx, ek, &eksize,
               ^
698.                                     encKey->data, encKey->length);
699.           ERR_clear_error(); /* error state may have sensitive information */

crypto/crmf/crmf_lib.c:701:46: Call
699.           ERR_clear_error(); /* error state may have sensitive information */
700.           failure = ~constant_time_is_zero_s(constant_time_msb(retval)
701.                                              | constant_time_is_zero(retval));
                                                    ^
702.           failure |= ~constant_time_eq_s(eksize, (size_t)cikeysize);
703.           if (failure) {

include/internal/constant_time_locl.h:164:1: <LHS trace>
162.   }
163.   
164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
165.   {
166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:164:1: Parameter `a`
  162.   }
  163.   
  164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  164.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));
                    ^
  167.   }
  168.   
