ssl/statem/statem_srvr.c:2784: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero_8`.
Showing all 9 steps of the trace


ssl/statem/statem_srvr.c:2753:9: Call
2751.        */
2752.   
2753.       if (ssl_randbytes(s, rand_premaster_secret, sizeof(rand_premaster_secret)) <= 0)
                ^
2754.           goto err;
2755.   

ssl/ssl_lib.c:5143:17: Call
  5141.            * here.
  5142.            */
  5143.            return RAND_DRBG_generate(s->drbg, rnd, size, 0, NULL, 0);
                          ^
  5144.       }
  5145.       return RAND_bytes(rnd, (int)size);

crypto/rand/drbg_lib.c:363:1: Parameter `drbg->ctr.V[*]`
    361.    *
    362.    */
    363. > int RAND_DRBG_generate(RAND_DRBG *drbg, unsigned char *out, size_t outlen,
    364.                          int prediction_resistance,
    365.                          const unsigned char *adin, size_t adinlen)

ssl/statem/statem_srvr.c:2784:26: Call
2782.           constant_time_eq_int_8(rsa_decrypt[1], 2);
2783.       for (j = 2; j < padding_len - 1; j++) {
2784.           decrypt_good &= ~constant_time_is_zero_8(rsa_decrypt[j]);
                                 ^
2785.       }
2786.       decrypt_good &= constant_time_is_zero_8(rsa_decrypt[padding_len - 1]);

include/internal/constant_time_locl.h:167:1: Parameter `a`
  165.   }
  166.   
  167. > static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a)
  168.   {
  169.       return (unsigned char)constant_time_is_zero(a);

include/internal/constant_time_locl.h:169:27: Call
  167.   static ossl_inline unsigned char constant_time_is_zero_8(unsigned int a)
  168.   {
  169.       return (unsigned char)constant_time_is_zero(a);
                                   ^
  170.   }
  171.   

include/internal/constant_time_locl.h:157:1: <LHS trace>
155.   }
156.   
157. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
158.   {
159.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:157:1: Parameter `a`
    155.   }
    156.   
    157. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    158.   {
    159.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:159:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero_8` 
    157.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    158.   {
    159.       return constant_time_msb(~a & (a - 1));
                      ^
    160.   }
    161.   
