crypto/rsa/rsa_pk1.c:239: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 10):unsigned32 by call to `constant_time_ge`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pk1.c:190:5: Assignment
188.       unsigned char *em = NULL;
189.       unsigned int good, found_zero_byte;
190.       int zero_index = 0, msg_index, mlen = -1;
           ^
191.   
192.       if (tlen < 0 || flen < 0)

crypto/rsa/rsa_pk1.c:239:13: Call
237.        * also fails.
238.        */
239.       good &= constant_time_ge((unsigned int)(zero_index), 2 + 8);
                   ^
240.   
241.       /*

crypto/constant_time_locl.h:148:1: Parameter `a`
  146.   }
  147.   
  148. > static inline unsigned int constant_time_ge(unsigned int a, unsigned int b)
  149.   {
  150.       return ~constant_time_lt(a, b);

crypto/constant_time_locl.h:150:13: Call
  148.   static inline unsigned int constant_time_ge(unsigned int a, unsigned int b)
  149.   {
  150.       return ~constant_time_lt(a, b);
                     ^
  151.   }
  152.   

crypto/constant_time_locl.h:138:1: <LHS trace>
136.   }
137.   
138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
139.   {
140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:138:1: Parameter `a`
    136.   }
    137.   
    138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
    139.   {
    140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:138:1: <RHS trace>
136.   }
137.   
138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
139.   {
140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:138:1: Parameter `b`
    136.   }
    137.   
    138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
    139.   {
    140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:140:12: Binary operation: ([0, +oo] - 10):unsigned32 by call to `constant_time_ge` 
    138.   static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
    139.   {
    140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
                      ^
    141.   }
    142.   
