crypto/evp/bio_enc.c:344: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `EVP_CipherFinal_ex`.
Showing all 15 steps of the trace


crypto/evp/bio_enc.c:335:6: Call
333.   		while (ctx->buf_len != ctx->buf_off)
334.   			{
335.   			i=enc_write(b,NULL,0);
            ^
336.   			if (i < 0)
337.   				return i;

crypto/evp/bio_enc.c:264:8: Call
  262.   		{
  263.   		n=(inl > ENC_BLOCK_SIZE)?ENC_BLOCK_SIZE:inl;
  264.   		if (!EVP_CipherUpdate(&(ctx->cipher),
                ^
  265.   			(unsigned char *)ctx->buf,&ctx->buf_len,
  266.   			(unsigned char *)in,n))

crypto/evp/evp_enc.c:257:10: Call
    255.   	{
    256.   	if (ctx->encrypt)
    257.   		return EVP_EncryptUpdate(ctx,out,outl,in,inl);
                    ^
    258.   	else	return EVP_DecryptUpdate(ctx,out,outl,in,inl);
    259.   	}

crypto/evp/evp_enc.c:299:1: Parameter `*in`
      297.   	}
      298.   
      299. > int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
      300.   	     const unsigned char *in, int inl)
      301.   	{

crypto/evp/bio_enc.c:344:8: Call
342.   			ctx->finished=1;
343.   			ctx->buf_off=0;
344.   			ret=EVP_CipherFinal_ex(&(ctx->cipher),
              ^
345.   				(unsigned char *)ctx->buf,
346.   				&(ctx->buf_len));

crypto/evp/evp_enc.c:261:1: Parameter `ctx->final[*]`
  259.   	}
  260.   
  261. > int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
  262.   	{
  263.   	if (ctx->encrypt)

crypto/evp/evp_enc.c:265:14: Call
  263.   	if (ctx->encrypt)
  264.   		return EVP_EncryptFinal_ex(ctx,out,outl);
  265.   	else	return EVP_DecryptFinal_ex(ctx,out,outl);
                      ^
  266.   	}
  267.   

crypto/evp/evp_enc.c:493:1: Parameter `ctx->final[*]`
    491.   	}
    492.   
    493. > int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
    494.   	{
    495.   	unsigned int i, b;

crypto/evp/evp_enc.c:528:3: Assignment
    526.   			}
    527.   		OPENSSL_assert(b <= sizeof ctx->final);
    528.   		pad=ctx->final[b-1];
             ^
    529.   
    530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));

crypto/evp/evp_enc.c:530:35: Call
    528.   		pad=ctx->final[b-1];
    529.   
    530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));
                                             ^
    531.   		padding_good &= constant_time_ge_8(b, pad);
    532.   

crypto/constant_time_locl.h:170:1: Parameter `a`
      168.   	}
      169.   
      170. > static inline unsigned char constant_time_is_zero_8(unsigned int a)
      171.   	{
      172.   	return (unsigned char)(constant_time_is_zero(a));

crypto/constant_time_locl.h:172:25: Call
      170.   static inline unsigned char constant_time_is_zero_8(unsigned int a)
      171.   	{
      172.   	return (unsigned char)(constant_time_is_zero(a));
                                     ^
      173.   	}
      174.   

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
        163.   	}
        164.   
        165. > static inline unsigned int constant_time_is_zero(unsigned int a)
        166.   	{
        167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `EVP_CipherFinal_ex` 
        165.   static inline unsigned int constant_time_is_zero(unsigned int a)
        166.   	{
        167.   	return constant_time_msb(~a & (a - 1));
                       ^
        168.   	}
        169.   
