crypto/pkcs12/p12_decr.c:101: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `EVP_CipherFinal_ex`.
Showing all 14 steps of the trace


crypto/pkcs12/p12_decr.c:92:7: Call
90.   	}
91.   
92.   	if (!EVP_CipherUpdate(&ctx, out, &i, in, inlen))
            ^
93.   		{
94.   		OPENSSL_free(out);

crypto/evp/evp_enc.c:257:10: Call
  255.   	{
  256.   	if (ctx->encrypt)
  257.   		return EVP_EncryptUpdate(ctx,out,outl,in,inl);
                  ^
  258.   	else	return EVP_DecryptUpdate(ctx,out,outl,in,inl);
  259.   	}

crypto/evp/evp_enc.c:299:1: Parameter `*in`
    297.   	}
    298.   
    299. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
    300.   	     const unsigned char *in, int inl)
    301.   	{

crypto/pkcs12/p12_decr.c:101:6: Call
99.   
100.   	outlen = i;
101.   	if(!EVP_CipherFinal_ex(&ctx, out + i, &i)) {
            ^
102.   		OPENSSL_free(out);
103.   		out = NULL;

crypto/evp/evp_enc.c:261:1: Parameter `ctx->final[*]`
  259.   	}
  260.   
  261. > int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
  262.   	{
  263.   	if (ctx->encrypt)

crypto/evp/evp_enc.c:265:14: Call
  263.   	if (ctx->encrypt)
  264.   		return EVP_EncryptFinal_ex(ctx,out,outl);
  265.   	else	return EVP_DecryptFinal_ex(ctx,out,outl);
                      ^
  266.   	}
  267.   

crypto/evp/evp_enc.c:493:1: Parameter `ctx->final[*]`
    491.   	}
    492.   
    493. > int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
    494.   	{
    495.   	unsigned int i, b;

crypto/evp/evp_enc.c:528:3: Assignment
    526.   			}
    527.   		OPENSSL_assert(b <= sizeof ctx->final);
    528.   		pad=ctx->final[b-1];
             ^
    529.   
    530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));

crypto/evp/evp_enc.c:530:35: Call
    528.   		pad=ctx->final[b-1];
    529.   
    530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));
                                             ^
    531.   		padding_good &= constant_time_ge_8(b, pad);
    532.   

crypto/constant_time_locl.h:170:1: Parameter `a`
      168.   	}
      169.   
      170. > static inline unsigned char constant_time_is_zero_8(unsigned int a)
      171.   	{
      172.   	return (unsigned char)(constant_time_is_zero(a));

crypto/constant_time_locl.h:172:25: Call
      170.   static inline unsigned char constant_time_is_zero_8(unsigned int a)
      171.   	{
      172.   	return (unsigned char)(constant_time_is_zero(a));
                                     ^
      173.   	}
      174.   

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
        163.   	}
        164.   
        165. > static inline unsigned int constant_time_is_zero(unsigned int a)
        166.   	{
        167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `EVP_CipherFinal_ex` 
        165.   static inline unsigned int constant_time_is_zero(unsigned int a)
        166.   	{
        167.   	return constant_time_msb(~a & (a - 1));
                       ^
        168.   	}
        169.   
