crypto/rsa/rsa_oaep.c:194: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 5 steps of the trace


crypto/rsa/rsa_oaep.c:194:35: Unknown value from: CRYPTO_memcmp
192.           goto cleanup;
193.   
194.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                                         ^
195.   
196.       found_one_byte = 0;

crypto/rsa/rsa_oaep.c:194:13: Call
192.           goto cleanup;
193.   
194.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                   ^
195.   
196.       found_one_byte = 0;

include/internal/constant_time_locl.h:129:1: <LHS trace>
127.   }
128.   
129. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
130.   {
131.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:129:1: Parameter `a`
  127.   }
  128.   
  129. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  130.   {
  131.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:131:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  129.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  130.   {
  131.       return constant_time_msb(~a & (a - 1));
                    ^
  132.   }
  133.   
