crypto/rsa/rsa_oaep.c:192: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 7 steps of the trace


crypto/rsa/rsa_oaep.c:192:35: Call
190.           goto cleanup;
191.   
192.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                                         ^
193.   
194.       found_one_byte = 0;

crypto/cryptlib.c:473:5: Assignment
  471.       const unsigned char *a = in_a;
  472.       const unsigned char *b = in_b;
  473.       unsigned char x = 0;
             ^
  474.   
  475.       for (i = 0; i < len; i++)

crypto/cryptlib.c:478:5: Assignment
  476.           x |= a[i] ^ b[i];
  477.   
  478.       return x;
             ^
  479.   }

crypto/rsa/rsa_oaep.c:192:13: Call
190.           goto cleanup;
191.   
192.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                   ^
193.   
194.       found_one_byte = 0;

crypto/constant_time_locl.h:158:1: <LHS trace>
156.   }
157.   
158. > static inline unsigned int constant_time_is_zero(unsigned int a)
159.   {
160.       return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:158:1: Parameter `a`
  156.   }
  157.   
  158. > static inline unsigned int constant_time_is_zero(unsigned int a)
  159.   {
  160.       return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:160:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  158.   static inline unsigned int constant_time_is_zero(unsigned int a)
  159.   {
  160.       return constant_time_msb(~a & (a - 1));
                    ^
  161.   }
  162.   
