crypto/rsa/rsa_ossl.c:591: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2`.
Showing all 8 steps of the trace


crypto/rsa/rsa_ossl.c:520:9: Call
518.   
519.       /* make data into a big number */
520.       if (BN_bin2bn(from, (int)flen, f) == NULL)
               ^
521.           goto err;
522.   

crypto/bn/bn_lib.c:532:1: Parameter `*ret->d`
  530.   }
  531.   
  532. > BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)
  533.   {
  534.       unsigned int i, m;

crypto/rsa/rsa_ossl.c:591:13: Call
589.       switch (padding) {
590.       case RSA_PKCS1_PADDING:
591.           r = RSA_padding_check_PKCS1_type_2(to, num, buf, j, num);
                   ^
592.           break;
593.       case RSA_PKCS1_OAEP_PADDING:

crypto/rsa/rsa_pk1.c:202:1: Parameter `*from`
  200.   }
  201.   
  202. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
  203.                                      const unsigned char *from, int flen,
  204.                                      int num)

crypto/rsa/rsa_pk1.c:246:32: Call
  244.       found_zero_byte = 0;
  245.       for (i = 2; i < num; i++) {
  246.           unsigned int equals0 = constant_time_is_zero(em[i]);
                                        ^
  247.           zero_index =
  248.               constant_time_select_int(~found_zero_byte & equals0, i,

include/internal/constant_time_locl.h:165:1: <LHS trace>
163.   }
164.   
165. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
166.   {
167.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:165:1: Parameter `a`
    163.   }
    164.   
    165. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    166.   {
    167.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:167:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2` 
    165.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    166.   {
    167.       return constant_time_msb(~a & (a - 1));
                      ^
    168.   }
    169.   
