491   int maskedDBLen, MSBits, emLen;  in RSA_verify_PKCS1_PSS_mgf1()  local
537   maskedDBLen = emLen - hLen - 1;  in RSA_verify_PKCS1_PSS_mgf1()
538   H = EM + maskedDBLen;  in RSA_verify_PKCS1_PSS_mgf1()
539   DB = OPENSSL_malloc(maskedDBLen);  in RSA_verify_PKCS1_PSS_mgf1()
544   if (!PKCS1_MGF1(DB, maskedDBLen, H, hLen, mgf1Hash)) {  in RSA_verify_PKCS1_PSS_mgf1()
547   for (i = 0; i < maskedDBLen; i++) {  in RSA_verify_PKCS1_PSS_mgf1()
553   for (i = 0; DB[i] == 0 && i < (maskedDBLen - 1); i++) {  in RSA_verify_PKCS1_PSS_mgf1()
560   if (sLen >= 0 && (maskedDBLen - i) != sLen) {  in RSA_verify_PKCS1_PSS_mgf1()
567       !EVP_DigestUpdate(&ctx, DB + i, maskedDBLen - i) ||  in RSA_verify_PKCS1_PSS_mgf1()
590   size_t maskedDBLen, MSBits, emLen;  in RSA_padding_add_PKCS1_PSS_mgf1()  local
649   maskedDBLen = emLen - hLen - 1;  in RSA_padding_add_PKCS1_PSS_mgf1()
650   H = EM + maskedDBLen;  in RSA_padding_add_PKCS1_PSS_mgf1()
665   if (!PKCS1_MGF1(EM, maskedDBLen, H, hLen, mgf1Hash)) {  in RSA_padding_add_PKCS1_PSS_mgf1()