crypto/asn1/n_pkey.c:321: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `EVP_DecryptFinal_ex`.
Showing all 11 steps of the trace


crypto/asn1/n_pkey.c:319:7: Call
317.   	if (!EVP_DecryptInit_ex(&ctx,EVP_rc4(),NULL, key,NULL))
318.   		goto err;
319.   	if (!EVP_DecryptUpdate(&ctx,os->data,&i,os->data,os->length))
             ^
320.   		goto err;
321.   	if (!EVP_DecryptFinal_ex(&ctx,&(os->data[i]),&j))

crypto/evp/evp_enc.c:425:1: Parameter `ctx->buf[*]`
  423.   	}
  424.   
  425. > int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  426.   	     const unsigned char *in, int inl)
  427.   	{

crypto/asn1/n_pkey.c:321:7: Call
319.   	if (!EVP_DecryptUpdate(&ctx,os->data,&i,os->data,os->length))
320.   		goto err;
321.   	if (!EVP_DecryptFinal_ex(&ctx,&(os->data[i]),&j))
             ^
322.   		goto err;
323.   	os->length=i+j;

crypto/evp/evp_enc.c:493:1: Parameter `ctx->final[*]`
  491.   	}
  492.   
  493. > int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
  494.   	{
  495.   	unsigned int i, b;

crypto/evp/evp_enc.c:528:3: Assignment
  526.   			}
  527.   		OPENSSL_assert(b <= sizeof ctx->final);
  528.   		pad=ctx->final[b-1];
           ^
  529.   
  530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));

crypto/evp/evp_enc.c:530:35: Call
  528.   		pad=ctx->final[b-1];
  529.   
  530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));
                                           ^
  531.   		padding_good &= constant_time_ge_8(b, pad);
  532.   

crypto/constant_time_locl.h:170:1: Parameter `a`
    168.   	}
    169.   
    170. > static inline unsigned char constant_time_is_zero_8(unsigned int a)
    171.   	{
    172.   	return (unsigned char)(constant_time_is_zero(a));

crypto/constant_time_locl.h:172:25: Call
    170.   static inline unsigned char constant_time_is_zero_8(unsigned int a)
    171.   	{
    172.   	return (unsigned char)(constant_time_is_zero(a));
                                   ^
    173.   	}
    174.   

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
      163.   	}
      164.   
      165. > static inline unsigned int constant_time_is_zero(unsigned int a)
      166.   	{
      167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `EVP_DecryptFinal_ex` 
      165.   static inline unsigned int constant_time_is_zero(unsigned int a)
      166.   	{
      167.   	return constant_time_msb(~a & (a - 1));
                     ^
      168.   	}
      169.   
