crypto/rsa/rsa_eay.c:647: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:614:8: Unknown value from: non-const function
612.   		(rsa->iqmp != NULL)) )
613.   		{
614.   		if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx)) goto err;
              ^
615.   		}
616.   	else

crypto/rsa/rsa_eay.c:642:4: Call
640.   
641.   	p=buf;
642.   	j=BN_bn2bin(ret,p); /* j is only used with no-padding mode */
          ^
643.   
644.   	switch (padding)

crypto/bn/bn_lib.c:634:1: Parameter `*a->d`
  632.   
  633.   /* ignore negative */
  634. > int BN_bn2bin(const BIGNUM *a, unsigned char *to)
  635.   	{
  636.   	int n,i;

crypto/bn/bn_lib.c:640:6: Call
  638.   
  639.   	bn_check_top(a);
  640.   	n=i=BN_num_bytes(a);
              ^
  641.   	while (i--)
  642.   		{

crypto/bn/bn_lib.c:232:1: Parameter `*a->d`
    230.   	}
    231.   
    232. > int BN_num_bits(const BIGNUM *a)
    233.   	{
    234.   	int i = a->top - 1;

crypto/rsa/rsa_eay.c:647:5: Call
645.   		{
646.   	case RSA_PKCS1_PADDING:
647.   		r=RSA_padding_check_PKCS1_type_2(to,num,buf,j,num);
           ^
648.   		break;
649.   #ifndef OPENSSL_NO_SHA

crypto/rsa/rsa_pk1.c:185:1: Parameter `*from`
  183.   	}
  184.   
  185. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
  186.   	     const unsigned char *from, int flen, int num)
  187.   	{

crypto/rsa/rsa_pk1.c:229:26: Call
  227.   	for (i = 2; i < num; i++)
  228.   		{
  229.   		unsigned int equals0 = constant_time_is_zero(em[i]);
                                  ^
  230.   		zero_index = constant_time_select_int(~found_zero_byte & equals0, i, zero_index);
  231.   		found_zero_byte |= equals0;

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
    163.   	}
    164.   
    165. > static inline unsigned int constant_time_is_zero(unsigned int a)
    166.   	{
    167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2` 
    165.   static inline unsigned int constant_time_is_zero(unsigned int a)
    166.   	{
    167.   	return constant_time_msb(~a & (a - 1));
                   ^
    168.   	}
    169.   
