crypto/rsa/rsa_oaep.c:177: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `flen`)] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 5 steps of the trace


crypto/rsa/rsa_oaep.c:116:1: Parameter `flen`
114.   }
115.   
116. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
117.                                         const unsigned char *from, int flen,
118.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:177:17: Call
175.        */
176.       for (from += flen, em += num, i = 0; i < num; i++) {
177.           mask = ~constant_time_is_zero(flen);
                       ^
178.           flen -= 1 & mask;
179.           from -= 1 & mask;

include/internal/constant_time_locl.h:164:1: <LHS trace>
162.   }
163.   
164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
165.   {
166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:164:1: Parameter `a`
  162.   }
  163.   
  164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:12: Binary operation: ([0, max(0, flen)] - 1):unsigned32 by call to `constant_time_is_zero` 
  164.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));
                    ^
  167.   }
  168.   
