crypto/rsa/rsa_ossl.c:468: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2`.
Showing all 8 steps of the trace


crypto/rsa/rsa_ossl.c:403:9: Call
401.   
402.       /* make data into a big number */
403.       if (BN_bin2bn(from, (int)flen, f) == NULL)
               ^
404.           goto err;
405.   

crypto/bn/bn_lib.c:372:1: Parameter `*ret->d`
  370.   }
  371.   
  372. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
  373.   {
  374.       unsigned int i, m;

crypto/rsa/rsa_ossl.c:468:13: Call
466.       switch (padding) {
467.       case RSA_PKCS1_PADDING:
468.           r = RSA_padding_check_PKCS1_type_2(to, num, buf, j, num);
                   ^
469.           break;
470.       case RSA_PKCS1_OAEP_PADDING:

crypto/rsa/rsa_pk1.c:154:1: Parameter `*from`
  152.   }
  153.   
  154. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
  155.                                      const unsigned char *from, int flen,
  156.                                      int num)

crypto/rsa/rsa_pk1.c:196:12: Call
  194.       }
  195.   
  196.       good = constant_time_is_zero(from[0]);
                    ^
  197.       good &= constant_time_eq(from[1], 2);
  198.   

include/internal/constant_time_locl.h:164:1: <LHS trace>
162.   }
163.   
164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
165.   {
166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:164:1: Parameter `a`
    162.   }
    163.   
    164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    165.   {
    166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2` 
    164.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    165.   {
    166.       return constant_time_msb(~a & (a - 1));
                      ^
    167.   }
    168.   
