crypto/rsa/rsa_oaep.c:197: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 7 steps of the trace


crypto/rsa/rsa_oaep.c:197:32: Call
195.   		goto cleanup;
196.   
197.   	good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                                      ^
198.   
199.   	found_one_byte = 0;

crypto/cryptlib.c:406:2: Assignment
  404.   	const unsigned char *a = in_a;
  405.   	const unsigned char *b = in_b;
  406.   	unsigned char x = 0;
          ^
  407.   
  408.   	for (i = 0; i < len; i++)

crypto/cryptlib.c:411:2: Assignment
  409.   		x |= a[i] ^ b[i];
  410.   
  411.   	return x;
          ^
  412.   	}

crypto/rsa/rsa_oaep.c:197:10: Call
195.   		goto cleanup;
196.   
197.   	good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                ^
198.   
199.   	found_one_byte = 0;

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
  163.   	}
  164.   
  165. > static inline unsigned int constant_time_is_zero(unsigned int a)
  166.   	{
  167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  165.   static inline unsigned int constant_time_is_zero(unsigned int a)
  166.   	{
  167.   	return constant_time_msb(~a & (a - 1));
                 ^
  168.   	}
  169.   
