crypto/rsa/rsa_eay.c:604: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2`.
Showing all 11 steps of the trace


crypto/rsa/rsa_eay.c:563:14: Unknown value from: non-const function
561.            (rsa->q != NULL) &&
562.            (rsa->dmp1 != NULL) && (rsa->dmq1 != NULL) && (rsa->iqmp != NULL))) {
563.           if (!rsa->meth->rsa_mod_exp(ret, f, rsa, ctx))
                    ^
564.               goto err;
565.       } else {

crypto/rsa/rsa_eay.c:600:9: Call
598.   
599.       p = buf;
600.       j = BN_bn2bin(ret, p);      /* j is only used with no-padding mode */
               ^
601.   
602.       switch (padding) {

crypto/bn/bn_lib.c:590:1: Parameter `*a->d`
  588.   
  589.   /* ignore negative */
  590. > int BN_bn2bin(const BIGNUM *a, unsigned char *to)
  591.   {
  592.       int n, i;

crypto/bn/bn_lib.c:596:13: Call
  594.   
  595.       bn_check_top(a);
  596.       n = i = BN_num_bytes(a);
                     ^
  597.       while (i--) {
  598.           l = a->d[i / BN_BYTES];

crypto/bn/bn_lib.c:216:1: Parameter `*a->d`
    214.   }
    215.   
    216. > int BN_num_bits(const BIGNUM *a)
    217.   {
    218.       int i = a->top - 1;

crypto/rsa/rsa_eay.c:604:13: Call
602.       switch (padding) {
603.       case RSA_PKCS1_PADDING:
604.           r = RSA_padding_check_PKCS1_type_2(to, num, buf, j, num);
                   ^
605.           break;
606.   # ifndef OPENSSL_NO_SHA

crypto/rsa/rsa_pk1.c:182:1: Parameter `*from`
  180.   }
  181.   
  182. > int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,
  183.                                      const unsigned char *from, int flen,
  184.                                      int num)

crypto/rsa/rsa_pk1.c:227:32: Call
  225.       found_zero_byte = 0;
  226.       for (i = 2; i < num; i++) {
  227.           unsigned int equals0 = constant_time_is_zero(em[i]);
                                        ^
  228.           zero_index =
  229.               constant_time_select_int(~found_zero_byte & equals0, i,

crypto/constant_time_locl.h:158:1: <LHS trace>
156.   }
157.   
158. > static inline unsigned int constant_time_is_zero(unsigned int a)
159.   {
160.       return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:158:1: Parameter `a`
    156.   }
    157.   
    158. > static inline unsigned int constant_time_is_zero(unsigned int a)
    159.   {
    160.       return constant_time_msb(~a & (a - 1));

crypto/constant_time_locl.h:160:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_type_2` 
    158.   static inline unsigned int constant_time_is_zero(unsigned int a)
    159.   {
    160.       return constant_time_msb(~a & (a - 1));
                      ^
    161.   }
    162.   
