491   int maskedDBLen, MSBits, emLen;  in RSA_verify_PKCS1_PSS_mgf1()  local
519   emLen = RSA_size(rsa);  in RSA_verify_PKCS1_PSS_mgf1()
526     emLen--;  in RSA_verify_PKCS1_PSS_mgf1()
528   if (emLen < (int)hLen + 2 || emLen < ((int)hLen + sLen + 2)) {  in RSA_verify_PKCS1_PSS_mgf1()
533   if (EM[emLen - 1] != 0xbc) {  in RSA_verify_PKCS1_PSS_mgf1()
537   maskedDBLen = emLen - hLen - 1;  in RSA_verify_PKCS1_PSS_mgf1()
590   size_t maskedDBLen, MSBits, emLen;  in RSA_padding_add_PKCS1_PSS_mgf1()  local
606   emLen = RSA_size(rsa);  in RSA_padding_add_PKCS1_PSS_mgf1()
608     assert(emLen >= 1);  in RSA_padding_add_PKCS1_PSS_mgf1()
610     emLen--;  in RSA_padding_add_PKCS1_PSS_mgf1()
613   if (emLen < hLen + 2) {  in RSA_padding_add_PKCS1_PSS_mgf1()
626     sLen = emLen - hLen - 2;  in RSA_padding_add_PKCS1_PSS_mgf1()
634   if (emLen - hLen - 2 < sLen) {  in RSA_padding_add_PKCS1_PSS_mgf1()
649   maskedDBLen = emLen - hLen - 1;  in RSA_padding_add_PKCS1_PSS_mgf1()
674   p += emLen - sLen - hLen - 2;  in RSA_padding_add_PKCS1_PSS_mgf1()
687   EM[emLen - 1] = 0xbc;  in RSA_padding_add_PKCS1_PSS_mgf1()