488   int maskedDBLen, MSBits, emLen;  in RSA_verify_PKCS1_PSS_mgf1()  local
534   maskedDBLen = emLen - hLen - 1;  in RSA_verify_PKCS1_PSS_mgf1()
535   H = EM + maskedDBLen;  in RSA_verify_PKCS1_PSS_mgf1()
536   DB = OPENSSL_malloc(maskedDBLen);  in RSA_verify_PKCS1_PSS_mgf1()
541   if (!PKCS1_MGF1(DB, maskedDBLen, H, hLen, mgf1Hash)) {  in RSA_verify_PKCS1_PSS_mgf1()
544   for (i = 0; i < maskedDBLen; i++) {  in RSA_verify_PKCS1_PSS_mgf1()
550   for (i = 0; DB[i] == 0 && i < (maskedDBLen - 1); i++) {  in RSA_verify_PKCS1_PSS_mgf1()
557   if (sLen >= 0 && (maskedDBLen - i) != sLen) {  in RSA_verify_PKCS1_PSS_mgf1()
564       !EVP_DigestUpdate(&ctx, DB + i, maskedDBLen - i) ||  in RSA_verify_PKCS1_PSS_mgf1()
587   size_t maskedDBLen, MSBits, emLen;  in RSA_padding_add_PKCS1_PSS_mgf1()  local
646   maskedDBLen = emLen - hLen - 1;  in RSA_padding_add_PKCS1_PSS_mgf1()
647   H = EM + maskedDBLen;  in RSA_padding_add_PKCS1_PSS_mgf1()
662   if (!PKCS1_MGF1(EM, maskedDBLen, H, hLen, mgf1Hash)) {  in RSA_padding_add_PKCS1_PSS_mgf1()