crypto/rsa/rsa_pmeth.c:363: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pmeth.c:353:14: Call
351.       if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
352.           int i;
353.           if (!setup_tbuf(rctx, ctx))
                    ^
354.               return -1;
355.           ret = RSA_private_decrypt(inlen, in, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:142:17: Call
  140.       if (ctx->tbuf)
  141.           return 1;
  142.       ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey));
                         ^
  143.       if (ctx->tbuf == NULL)
  144.           return 0;

crypto/mem.c:124:16: Unknown value from: non-const function
    122.   
    123.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
    124.           return malloc_impl(num, file, line);
                          ^
    125.   
    126.       if (num <= 0)

crypto/rsa/rsa_pmeth.c:363:15: Call
361.                   break;
362.           }
363.           ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf + i,
                     ^
364.                                                   ret - i, ret,
365.                                                   rctx->oaep_label,

crypto/rsa/rsa_oaep.c:111:1: Parameter `*from`
  109.   }
  110.   
  111. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  112.                                         const unsigned char *from, int flen,
  113.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:172:12: Call
  170.        * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  171.        */
  172.       good = constant_time_is_zero(em[0]);
                    ^
  173.   
  174.       maskedseed = em + 1;

include/internal/constant_time_locl.h:165:1: <LHS trace>
163.   }
164.   
165. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
166.   {
167.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:165:1: Parameter `a`
    163.   }
    164.   
    165. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    166.   {
    167.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:167:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    165.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    166.   {
    167.       return constant_time_msb(~a & (a - 1));
                      ^
    168.   }
    169.   
