crypto/rsa/rsa_pmeth.c:411: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pmeth.c:399:8: Call
397.   		{
398.   		int i;
399.   		if (!setup_tbuf(rctx, ctx))
              ^
400.   			return -1;
401.   		ret = RSA_private_decrypt(inlen, in, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:156:14: Call
  154.   	if (ctx->tbuf)
  155.   		return 1;
  156.   	ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey));
                      ^
  157.   	if (!ctx->tbuf)
  158.   		return 0;

crypto/mem.c:307:8: Unknown value from: non-const function
    305.   		malloc_debug_func(NULL, num, file, line, 0);
    306.   		}
    307.   	ret = malloc_ex_func(num,file,line);
                  ^
    308.   #ifdef LEVITTE_DEBUG_MEM
    309.   	fprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\n", ret, num);

crypto/rsa/rsa_pmeth.c:411:9: Call
409.   				break;
410.   			}
411.   		ret = RSA_padding_check_PKCS1_OAEP_mgf1(out,ret,rctx->tbuf + i,
               ^
412.   							ret - i, ret,
413.   							rctx->oaep_label,

crypto/rsa/rsa_oaep.c:120:1: Parameter `*from`
  118.   	}
  119.   
  120. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  121.   	const unsigned char *from, int flen, int num,
  122.   	const unsigned char *param, int plen,

crypto/rsa/rsa_oaep.c:179:9: Call
  177.   	 * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  178.   	 */
  179.   	good = constant_time_is_zero(em[0]);
                 ^
  180.   
  181.   	maskedseed = em + 1;

crypto/constant_time_locl.h:165:1: <LHS trace>
163.   	}
164.   
165. > static inline unsigned int constant_time_is_zero(unsigned int a)
166.   	{
167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:165:1: Parameter `a`
    163.   	}
    164.   
    165. > static inline unsigned int constant_time_is_zero(unsigned int a)
    166.   	{
    167.   	return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:167:9: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    165.   static inline unsigned int constant_time_is_zero(unsigned int a)
    166.   	{
    167.   	return constant_time_msb(~a & (a - 1));
                   ^
    168.   	}
    169.   
