crypto/rsa/rsa_pmeth.c:331: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1`.
Showing all 9 steps of the trace


crypto/rsa/rsa_pmeth.c:325:14: Call
323.   
324.       if (rctx->pad_mode == RSA_PKCS1_OAEP_PADDING) {
325.           if (!setup_tbuf(rctx, ctx))
                    ^
326.               return -1;
327.           ret = RSA_private_decrypt(inlen, in, rctx->tbuf,

crypto/rsa/rsa_pmeth.c:102:17: Call
  100.       if (ctx->tbuf != NULL)
  101.           return 1;
  102.       ctx->tbuf = OPENSSL_malloc(EVP_PKEY_size(pk->pkey));
                         ^
  103.       if (ctx->tbuf == NULL)
  104.           return 0;

crypto/mem.c:195:16: Unknown value from: non-const function
    193.       INCREMENT(malloc_count);
    194.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
    195.           return malloc_impl(num, file, line);
                          ^
    196.   
    197.       if (num == 0)

crypto/rsa/rsa_pmeth.c:331:15: Call
329.           if (ret <= 0)
330.               return ret;
331.           ret = RSA_padding_check_PKCS1_OAEP_mgf1(out, ret, rctx->tbuf,
                     ^
332.                                                   ret, ret,
333.                                                   rctx->oaep_label,

crypto/rsa/rsa_oaep.c:114:1: Parameter `*from`
  112.   }
  113.   
  114. > int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,
  115.                                         const unsigned char *from, int flen,
  116.                                         int num, const unsigned char *param,

crypto/rsa/rsa_oaep.c:175:12: Call
  173.        * Optimal Asymmetric Encryption Padding (OAEP) [...]", CRYPTO 2001).
  174.        */
  175.       good = constant_time_is_zero(em[0]);
                    ^
  176.   
  177.       maskedseed = em + 1;

include/internal/constant_time_locl.h:157:1: <LHS trace>
155.   }
156.   
157. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
158.   {
159.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:157:1: Parameter `a`
    155.   }
    156.   
    157. > static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    158.   {
    159.       return constant_time_msb(~a & (a - 1));

include/internal/constant_time_locl.h:159:12: Binary operation: ([0, +oo] - 1):unsigned32 by call to `RSA_padding_check_PKCS1_OAEP_mgf1` 
    157.   static ossl_inline unsigned int constant_time_is_zero(unsigned int a)
    158.   {
    159.       return constant_time_msb(~a & (a - 1));
                      ^
    160.   }
    161.   
