crypto/rsa/rsa_oaep.c:206: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 7 steps of the trace


crypto/rsa/rsa_oaep.c:206:35: Call
204.           goto cleanup;
205.   
206.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                                         ^
207.   
208.       found_one_byte = 0;

crypto/cryptlib.c:448:5: Assignment
  446.       const volatile unsigned char *a = in_a;
  447.       const volatile unsigned char *b = in_b;
  448.       unsigned char x = 0;
             ^
  449.   
  450.       for (i = 0; i < len; i++)

crypto/cryptlib.c:453:5: Assignment
  451.           x |= a[i] ^ b[i];
  452.   
  453.       return x;
             ^
  454.   }
  455.   

crypto/rsa/rsa_oaep.c:206:13: Call
204.           goto cleanup;
205.   
206.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                   ^
207.   
208.       found_one_byte = 0;

include/internal/constant_time_locl.h:164:1: <LHS trace>
162.   }
163.   
164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
165.   {
166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:164:1: Parameter `a`
  162.   }
  163.   
  164. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  164.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  165.   {
  166.       return constant_time_msb(~a & (a - 1));
                    ^
  167.   }
  168.   
