crypto/ec/curve448/f_generic.c:96: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero_32`.
Showing all 5 steps of the trace


crypto/ec/curve448/f_generic.c:70:5: Assignment
68.   {
69.       unsigned int j = 0, fill = 0;
70.       dword_t buffer = 0;
          ^
71.       dsword_t scarry = 0;
72.       const unsigned nbytes = with_hibit ? X_SER_BYTES : SER_BYTES;

crypto/ec/curve448/f_generic.c:96:19: Call
94.       }
95.       succ = with_hibit ? 0 - (mask_t) 1 : ~gf_hibit(x);
96.       return succ & word_is_zero((word_t)buffer) & ~word_is_zero((word_t)scarry);
                        ^
97.   }
98.   

include/internal/constant_time_locl.h:183:1: <LHS trace>
181.   }
182.   
183. > static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
184.   {
185.       return constant_time_msb_32(~a & (a - 1));

include/internal/constant_time_locl.h:183:1: Parameter `a`
  181.   }
  182.   
  183. > static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
  184.   {
  185.       return constant_time_msb_32(~a & (a - 1));

include/internal/constant_time_locl.h:185:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero_32` 
  183.   static ossl_inline uint32_t constant_time_is_zero_32(uint32_t a)
  184.   {
  185.       return constant_time_msb_32(~a & (a - 1));
                    ^
  186.   }
  187.   
