crypto/rsa/rsa_pmeth.c:364: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pmeth.c:354:14: Call
352.       if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
353.           int i;
354.           if (!setup_tbuf(rctx, ctx))
                    ^
355.               return -1;
356.           ret = RSA_private_decrypt(inlen, in, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:143:17: Call
  141.       if (ctx->tbuf)
  142.           return 1;
  143.       ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey));
                         ^
  144.       if (ctx->tbuf == NULL)
  145.           return 0;

crypto/mem.c:293:11: Unknown value from: non-const function
    291.           malloc_debug_func(NULL, num, file, line, 0);
    292.       }
    293.       ret = malloc_ex_func(num, file, line);
                     ^
    294.   #ifdef LEVITTE_DEBUG_MEM
    295.       fprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\n", ret, num);

crypto/rsa/rsa_pmeth.c:364:15: Call
362.                   break;
363.           }
364.           ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf + i,
                     ^
365.                                                   ret - i, ret,
366.                                                   rctx->oaep_label,

crypto/rsa/rsa_oaep.c:112:1: Parameter `*from`
  110.   }
  111.   
  112. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  113.                                         const unsigned char *from, int flen,
  114.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:173:12: Call
  171.        * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  172.        */
  173.       good = constant_time_is_zero(em[0]);
                    ^
  174.   
  175.       maskedseed = em + 1;

include/internal/constant_time_locl.h:158:1: <LHS trace>
156.   }
157.   
158. > static inline unsigned int constant_time_is_zero(unsigned int a)
159.   {
160.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:158:1: Parameter `a`
    156.   }
    157.   
    158. > static inline unsigned int constant_time_is_zero(unsigned int a)
    159.   {
    160.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:160:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    158.   static inline unsigned int constant_time_is_zero(unsigned int a)
    159.   {
    160.       return constant_time_msb(~a & (a - 1));
                      ^
    161.   }
    162.   
