crypto/rsa/rsa_oaep.c:264: error: INTEGER_OVERFLOW_L2
  (0 - [0, 1]):unsigned64 by call to `err_clear_last_constant_time`.
Showing all 7 steps of the trace


crypto/rsa/rsa_oaep.c:209:5: Assignment
207.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
208.   
209.       found_one_byte = 0;
           ^
210.       for (i = mdlen; i < dblen; i++) {
211.           /*

crypto/rsa/rsa_oaep.c:222:5: Assignment
220.       }
221.   
222.       good &= found_one_byte;
           ^
223.   
224.       /*

crypto/rsa/rsa_oaep.c:235:5: Assignment
233.        * For good measure, do this check in constant tine as well.
234.        */
235.       good &= constant_time_ge(tlen, mlen);
           ^
236.   
237.       /*

crypto/rsa/rsa_oaep.c:264:5: Call
262.       RSAerr(RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP_MGF1,
263.              RSA_R_OAEP_DECODING_ERROR);
264.       err_clear_last_constant_time(1 & good);
           ^
265.    cleanup:
266.       OPENSSL_cleanse(seed, sizeof(seed));

crypto/err/err.c:883:1: <RHS trace>
881.   }
882.   
883. > void err_clear_last_constant_time(int clear)
884.   {
885.       ERR_STATE *es;

crypto/err/err.c:883:1: Parameter `clear`
  881.   }
  882.   
  883. > void err_clear_last_constant_time(int clear)
  884.   {
  885.       ERR_STATE *es;

crypto/err/err.c:895:5: Binary operation: (0 - [0, 1]):unsigned64 by call to `err_clear_last_constant_time` 
  893.   
  894.       es->err_flags[top] &= ~(0 - clear);
  895.       es->err_buffer[top] &= ~(0UL - clear);
             ^
  896.       es->err_file[top] = (const char *)((uintptr_t)es->err_file[top] &
  897.                                          ~((uintptr_t)0 - clear));
