crypto/rsa/rsa_eay.c:651: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP`.
Showing all 13 steps of the trace


crypto/rsa/rsa_eay.c:614:8: Unknown value from: non-const function
612.   		(rsa->iqmp != NULL)) )
613.   		{
614.   		if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx)) goto err;
              ^
615.   		}
616.   	else

crypto/rsa/rsa_eay.c:642:4: Call
640.   
641.   	p=buf;
642.   	j=BN_bn2bin(ret,p); /* j is only used with no-padding mode */
          ^
643.   
644.   	switch (padding)

crypto/bn/bn_lib.c:634:1: Parameter `*a->d`
  632.   
  633.   /* ignore negative */
  634. > int BN_bn2bin(const BIGNUM *a, unsigned char *to)
  635.   	{
  636.   	int n,i;

crypto/bn/bn_lib.c:640:6: Call
  638.   
  639.   	bn_check_top(a);
  640.   	n=i=BN_num_bytes(a);
              ^
  641.   	while (i--)
  642.   		{

crypto/bn/bn_lib.c:232:1: Parameter `*a->d`
    230.   	}
    231.   
    232. > int BN_num_bits(const BIGNUM *a)
    233.   	{
    234.   	int i = a->top - 1;

crypto/rsa/rsa_eay.c:651:12: Call
649.   #ifndef OPENSSL_NO_SHA
650.   	case RSA_PKCS1_OAEP_PADDING:
651.   	        r=RSA_padding_check_PKCS1_OAEP(to,num,buf,j,num,NULL,0);
                  ^
652.   		break;
653.   #endif

crypto/rsa/rsa_oaep.c:111:1: Parameter `*from`
  109.   	}
  110.   
  111. > int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,
  112.   	const unsigned char *from, int flen, int num,
  113.   	const unsigned char *param, int plen)

crypto/rsa/rsa_oaep.c:115:9: Call
  113.   	const unsigned char *param, int plen)
  114.   	{
  115.   	return RSA_padding_check_PKCS1_OAEP_mgf1(to, tlen, from , flen, num,
                 ^
  116.   							param, plen,
  117.   							NULL, NULL);

crypto/rsa/rsa_oaep.c:120:1: Parameter `*from`
    118.   	}
    119.   
    120. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
    121.   	const unsigned char *from, int flen, int num,
    122.   	const unsigned char *param, int plen,

crypto/rsa/rsa_oaep.c:179:9: Call
    177.   	 * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
    178.   	 */
    179.   	good = constant_time_is_zero(em[0]);
                   ^
    180.   
    181.   	maskedseed = em + 1;

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
      163.   	}
      164.   
      165. > static inline unsigned int constant_time_is_zero(unsigned int a)
      166.   	{
      167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP` 
      165.   static inline unsigned int constant_time_is_zero(unsigned int a)
      166.   	{
      167.   	return constant_time_msb(~a & (a - 1));
                     ^
      168.   	}
      169.   
