crypto/rsa/rsa_oaep.c:191: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero`.
Showing all 7 steps of the trace


crypto/rsa/rsa_oaep.c:191:35: Call
189.           goto cleanup;
190.   
191.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                                         ^
192.   
193.       found_one_byte = 0;

crypto/cryptlib.c:474:5: Assignment
  472.       const unsigned char *a = in_a;
  473.       const unsigned char *b = in_b;
  474.       unsigned char x = 0;
             ^
  475.   
  476.       for (i = 0; i < len; i++)

crypto/cryptlib.c:479:5: Assignment
  477.           x |= a[i] ^ b[i];
  478.   
  479.       return x;
             ^
  480.   }

crypto/rsa/rsa_oaep.c:191:13: Call
189.           goto cleanup;
190.   
191.       good &= constant_time_is_zero(CRYPTO_memcmp(db, phash, mdlen));
                   ^
192.   
193.       found_one_byte = 0;

include/internal/constant_time_locl.h:166:1: <LHS trace>
164.   }
165.   
166. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
167.   {
168.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:166:1: Parameter `a`
  164.   }
  165.   
  166. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  167.   {
  168.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:168:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `constant_time_is_zero` 
  166.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
  167.   {
  168.       return constant_time_msb(~a & (a - 1));
                    ^
  169.   }
  170.   
