crypto/rsa/rsa_ossl.c:591: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2`.
Showing all 11 steps of the trace


crypto/rsa/rsa_ossl.c:551:14: Unknown value from: non-const function
549.            (rsa->q != NULL) &&
550.            (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) {
551.           if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx))
                    ^
552.               goto err;
553.       } else {

crypto/rsa/rsa_ossl.c:587:9: Call
585.   
586.       p = buf;
587.       j = BN_bn2bin(ret, p);      /* j is only used with no-padding mode */
               ^
588.   
589.       switch (padding) {

crypto/bn/bn_lib.c:587:1: Parameter `*a->d`
  585.   
  586.   /* ignore negative */
  587. > int BN_bn2bin(const BIGNUM *a, unsigned char *to)
  588.   {
  589.       int n, i;

crypto/bn/bn_lib.c:593:13: Call
  591.   
  592.       bn_check_top(a);
  593.       n = i = BN_num_bytes(a);
                     ^
  594.       while (i--) {
  595.           l = a->d[i / BN_BYTES];

crypto/bn/bn_lib.c:214:1: Parameter `*a->d`
    212.   }
    213.   
    214. > int BN_num_bits(const BIGNUM *a)
    215.   {
    216.       int i = a->top - 1;

crypto/rsa/rsa_ossl.c:591:13: Call
589.       switch (padding) {
590.       case RSA_PKCS1_PADDING:
591.           r = RSA_padding_check_PKCS1_type_2(to, num, buf, j, num);
                   ^
592.           break;
593.       case RSA_PKCS1_OAEP_PADDING:

crypto/rsa/rsa_pk1.c:182:1: Parameter `*from`
  180.   }
  181.   
  182. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
  183.                                      const unsigned char *from, int flen,
  184.                                      int num)

crypto/rsa/rsa_pk1.c:226:32: Call
  224.       found_zero_byte = 0;
  225.       for (i = 2; i < num; i++) {
  226.           unsigned int equals0 = constant_time_is_zero(em[i]);
                                        ^
  227.           zero_index =
  228.               constant_time_select_int(~found_zero_byte & equals0, i,

include/internal/constant_time_locl.h:166:1: <LHS trace>
164.   }
165.   
166. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
167.   {
168.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:1: Parameter `a`
    164.   }
    165.   
    166. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    167.   {
    168.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:168:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2` 
    166.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    167.   {
    168.       return constant_time_msb(~a & (a - 1));
                      ^
    169.   }
    170.   
