ssl/t1_lib.c:3384: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `EVP_DecryptFinal`.
Showing all 13 steps of the trace


ssl/t1_lib.c:3383:2: Call
3381.   		return -1;
3382.   		}
3383.   	EVP_DecryptUpdate(&ctx, sdec, &slen, p, eticklen);
         ^
3384.   	if (EVP_DecryptFinal(&ctx, sdec + slen, &mlen) <= 0)
3385.   		{

crypto/evp/evp_enc.c:425:1: Parameter `ctx->buf[*]`
  423.   	}
  424.   
  425. > int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  426.   	     const unsigned char *in, int inl)
  427.   	{

ssl/t1_lib.c:3384:6: Call
3382.   		}
3383.   	EVP_DecryptUpdate(&ctx, sdec, &slen, p, eticklen);
3384.   	if (EVP_DecryptFinal(&ctx, sdec + slen, &mlen) <= 0)
             ^
3385.   		{
3386.   		EVP_CIPHER_CTX_cleanup(&ctx);

crypto/evp/evp_enc.c:486:1: Parameter `ctx->final[*]`
  484.   	}
  485.   
  486. > int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
  487.   	{
  488.   	int ret;

crypto/evp/evp_enc.c:489:8: Call
  487.   	{
  488.   	int ret;
  489.   	ret = EVP_DecryptFinal_ex(ctx, out, outl);
                ^
  490.   	return ret;
  491.   	}

crypto/evp/evp_enc.c:493:1: Parameter `ctx->final[*]`
    491.   	}
    492.   
    493. > int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl)
    494.   	{
    495.   	unsigned int i, b;

crypto/evp/evp_enc.c:528:3: Assignment
    526.   			}
    527.   		OPENSSL_assert(b <= sizeof ctx->final);
    528.   		pad=ctx->final[b-1];
             ^
    529.   
    530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));

crypto/evp/evp_enc.c:530:35: Call
    528.   		pad=ctx->final[b-1];
    529.   
    530.   		padding_good = (unsigned char)(~constant_time_is_zero_8(pad));
                                             ^
    531.   		padding_good &= constant_time_ge_8(b, pad);
    532.   

crypto/constant_time_locl.h:170:1: Parameter `a`
      168.   	}
      169.   
      170. > static inline unsigned char constant_time_is_zero_8(unsigned int a)
      171.   	{
      172.   	return (unsigned char)(constant_time_is_zero(a));

crypto/constant_time_locl.h:172:25: Call
      170.   static inline unsigned char constant_time_is_zero_8(unsigned int a)
      171.   	{
      172.   	return (unsigned char)(constant_time_is_zero(a));
                                     ^
      173.   	}
      174.   

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
        163.   	}
        164.   
        165. > static inline unsigned int constant_time_is_zero(unsigned int a)
        166.   	{
        167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `EVP_DecryptFinal` 
        165.   static inline unsigned int constant_time_is_zero(unsigned int a)
        166.   	{
        167.   	return constant_time_msb(~a & (a - 1));
                       ^
        168.   	}
        169.   
