crypto/rsa/rsa_pmeth.c:330: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pmeth.c:320:14: Call
318.       if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
319.           int i;
320.           if (!setup_tbuf(rctx, ctx))
                    ^
321.               return -1;
322.           ret = RSA_private_decrypt(inlen, in, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:102:17: Call
  100.       if (ctx->tbuf != NULL)
  101.           return 1;
  102.       ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey));
                         ^
  103.       if (ctx->tbuf == NULL)
  104.           return 0;

crypto/mem.c:163:16: Unknown value from: non-const function
    161.   
    162.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
    163.           return malloc_impl(num, file, line);
                          ^
    164.   
    165.       if (num == 0)

crypto/rsa/rsa_pmeth.c:330:15: Call
328.                   break;
329.           }
330.           ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf + i,
                     ^
331.                                                   ret - i, ret,
332.                                                   rctx->oaep_label,

crypto/rsa/rsa_oaep.c:119:1: Parameter `*from`
  117.   }
  118.   
  119. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  120.                                         const unsigned char *from, int flen,
  121.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:180:12: Call
  178.        * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  179.        */
  180.       good = constant_time_is_zero(em[0]);
                    ^
  181.   
  182.       maskedseed = em + 1;

include/internal/constant_time_locl.h:150:1: <LHS trace>
148.   }
149.   
150. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
151.   {
152.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:150:1: Parameter `a`
    148.   }
    149.   
    150. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    151.   {
    152.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:152:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    150.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    151.   {
    152.       return constant_time_msb(~a & (a - 1));
                      ^
    153.   }
    154.   
