crypto/rsa/rsa_pmeth.c:364: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 6 steps of the trace


crypto/rsa/rsa_pmeth.c:364:15: Call
362.                   break;
363.           }
364.           ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf + i,
                     ^
365.                                                   ret - i, ret,
366.                                                   rctx->oaep_label,

crypto/rsa/rsa_oaep.c:112:1: Parameter `*from`
  110.   }
  111.   
  112. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  113.                                         const unsigned char *from, int flen,
  114.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:173:12: Call
  171.        * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  172.        */
  173.       good = constant_time_is_zero(em[0]);
                    ^
  174.   
  175.       maskedseed = em + 1;

include/internal/constant_time_locl.h:166:1: <LHS trace>
164.   }
165.   
166. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
167.   {
168.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:1: Parameter `a`
    164.   }
    165.   
    166. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    167.   {
    168.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:168:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    166.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    167.   {
    168.       return constant_time_msb(~a & (a - 1));
                      ^
    169.   }
    170.   
