crypto/rsa/rsa_pss.c:203: error: INTEGER_OVERFLOW_L2
  ([-4, 32⋅`rsa->n->top` + 7] - [min(18446744073709551615, `Hash->md_size`), max(18446744073709551615, `Hash->md_size`)]):signed32.
Showing all 16 steps of the trace


crypto/rsa/rsa_pss.c:169:1: <LHS trace>
167.   	}
168.   
169. > int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
170.   			const unsigned char *mHash,
171.   			const EVP_MD *Hash, int sLen)

crypto/rsa/rsa_pss.c:169:1: Parameter `rsa->n->top`
167.   	}
168.   
169. > int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
170.   			const unsigned char *mHash,
171.   			const EVP_MD *Hash, int sLen)

crypto/rsa/rsa_pss.c:194:12: Call
192.   		}
193.   
194.   	MSBits = (BN_num_bits(rsa->n) - 1) & 0x7;
                  ^
195.   	emLen = RSA_size(rsa);
196.   	if (MSBits == 0)

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
  246.   	}
  247.   
  248. > int BN_num_bits(const BIGNUM *a)
  249.   	{
  250.   	int i = a->top - 1;

crypto/rsa/rsa_pss.c:195:10: Call
193.   
194.   	MSBits = (BN_num_bits(rsa->n) - 1) & 0x7;
195.   	emLen = RSA_size(rsa);
                ^
196.   	if (MSBits == 0)
197.   		{

crypto/rsa/rsa_lib.c:274:1: Parameter `r->n->top`
  272.   	}
  273.   
  274. > int RSA_size(const RSA *r)
  275.   	{
  276.   	return(BN_num_bytes(r->n));

crypto/rsa/rsa_lib.c:276:9: Call
  274.   int RSA_size(const RSA *r)
  275.   	{
  276.   	return(BN_num_bytes(r->n));
                 ^
  277.   	}
  278.   

crypto/bn/bn_lib.c:253:21: Assignment
    251.   	bn_check_top(a);
    252.   
    253.   	if (BN_is_zero(a)) return 0;
                               ^
    254.   	return ((i*BN_BITS2) + BN_num_bits_word(a->d[i]));
    255.   	}

crypto/rsa/rsa_lib.c:276:2: Assignment
  274.   int RSA_size(const RSA *r)
  275.   	{
  276.   	return(BN_num_bytes(r->n));
          ^
  277.   	}
  278.   

crypto/rsa/rsa_pss.c:195:2: Assignment
193.   
194.   	MSBits = (BN_num_bits(rsa->n) - 1) & 0x7;
195.   	emLen = RSA_size(rsa);
        ^
196.   	if (MSBits == 0)
197.   		{

crypto/rsa/rsa_pss.c:169:1: <RHS trace>
167.   	}
168.   
169. > int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
170.   			const unsigned char *mHash,
171.   			const EVP_MD *Hash, int sLen)

crypto/rsa/rsa_pss.c:169:1: Parameter `Hash->md_size`
167.   	}
168.   
169. > int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
170.   			const unsigned char *mHash,
171.   			const EVP_MD *Hash, int sLen)

crypto/rsa/rsa_pss.c:179:9: Call
177.   	EVP_MD_CTX ctx;
178.   
179.   	hLen = EVP_MD_size(Hash);
               ^
180.   	/*
181.   	 * Negative sLen has special meanings:

crypto/evp/evp_lib.c:260:3: Assignment
  258.   	{
  259.   	if (!md)
  260.   		return -1;
           ^
  261.   	return md->md_size;
  262.   	}

crypto/rsa/rsa_pss.c:179:2: Assignment
177.   	EVP_MD_CTX ctx;
178.   
179.   	hLen = EVP_MD_size(Hash);
        ^
180.   	/*
181.   	 * Negative sLen has special meanings:

crypto/rsa/rsa_pss.c:203:3: Binary operation: ([-4, 32⋅rsa->n->top + 7] - [min(18446744073709551615, Hash->md_size), max(18446744073709551615, Hash->md_size)]):signed32
201.   	if (sLen == -2)
202.   		{
203.   		sLen = emLen - hLen - 2;
         ^
204.   		}
205.   	else if (emLen < (hLen + sLen + 2))
