test/wpackettest.c:404: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `WPACKET_finish`.
Showing all 12 steps of the trace


test/wpackettest.c:402:10: Call
400.       const unsigned char bytes[] = { 0xfe, 0xff };
401.   
402.       if (!WPACKET_init_len(&pkt, buf, 1)
                ^
403.               || !WPACKET_memcpy(&pkt, bytes, sizeof(bytes))
404.               || !WPACKET_finish(&pkt)

ssl/packet.c:134:1: Parameter `pkt->written`
  132.   }
  133.   
  134. > int WPACKET_init_len(WPACKET *pkt, BUF_MEM *buf, size_t lenbytes)
  135.   {
  136.       /* Internal API, so should not fail */

test/wpackettest.c:403:17: Call
401.   
402.       if (!WPACKET_init_len(&pkt, buf, 1)
403.               || !WPACKET_memcpy(&pkt, bytes, sizeof(bytes))
                       ^
404.               || !WPACKET_finish(&pkt)
405.               || !WPACKET_get_total_written(&pkt, &written)

ssl/packet.c:353:1: Parameter `pkt->written`
  351.   }
  352.   
  353. > int WPACKET_memcpy(WPACKET *pkt, const void *src, size_t len)
  354.   {
  355.       unsigned char *dest;

test/wpackettest.c:404:17: Call
402.       if (!WPACKET_init_len(&pkt, buf, 1)
403.               || !WPACKET_memcpy(&pkt, bytes, sizeof(bytes))
404.               || !WPACKET_finish(&pkt)
                       ^
405.               || !WPACKET_get_total_written(&pkt, &written)
406.               ||  written != sizeof(alloc)

ssl/packet.c:255:1: Parameter `pkt->written`
  253.   }
  254.   
  255. > int WPACKET_finish(WPACKET *pkt)
  256.   {
  257.       int ret;

ssl/packet.c:266:11: Call
  264.           return 0;
  265.   
  266.       ret = wpacket_intern_close(pkt, pkt->subs, 1);
                   ^
  267.       if (ret) {
  268.           OPENSSL_free(pkt->subs);

ssl/packet.c:188:1: <LHS trace>
186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
187.    */
188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
189.   {
190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:188:1: Parameter `pkt->written`
    186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
    187.    */
    188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
    189.   {
    190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:188:1: <RHS trace>
186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
187.    */
188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
189.   {
190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:188:1: Parameter `sub->pwritten`
    186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
    187.    */
    188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
    189.   {
    190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:190:5: Binary operation: ([0, +oo] - 1):unsigned64 by call to `WPACKET_finish` 
    188.   static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
    189.   {
    190.       size_t packlen = pkt->written - sub->pwritten;
               ^
    191.   
    192.       if (packlen == 0

static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
{
    size_t packlen = pkt->written - sub->pwritten;
    if (packlen == 0
            && (sub->flags & WPACKET_FLAGS_NON_ZERO_LENGTH) != 0)
        return 0;
    if (packlen == 0
            && sub->flags & WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH) {
        if (!doclose)
            return 0;
        if ((pkt->curr - sub->lenbytes) == sub->packet_len) {
            pkt->written -= sub->lenbytes;
            pkt->curr -= sub->lenbytes;
        }
        sub->packet_len = 0;
        sub->lenbytes = 0;
    }
    if (sub->lenbytes > 0
                && !put_value(&GETBUF(pkt)[sub->packet_len], packlen,
                              sub->lenbytes))
            return 0;
    if (doclose) {
        pkt->subs = sub->parent;
        OPENSSL_free(sub);
    }
    return 1;
}
['static int test_WPACKET_memcpy(void)\n{\n    WPACKET pkt;\n    size_t written;\n    const unsigned char bytes[] = { 0xfe, 0xff };\n    if (!WPACKET_init_len(&pkt, buf, 1)\n            || !WPACKET_memcpy(&pkt, bytes, sizeof(bytes))\n            || !WPACKET_finish(&pkt)\n            || !WPACKET_get_total_written(&pkt, &written)\n            ||  written != sizeof(alloc)\n            ||  memcmp(buf->data, &alloc, written) != 0) {\n        testfail("test_WPACKET_memcpy():1 failed\\n", &pkt);\n        return 0;\n    }\n    if (!WPACKET_init_len(&pkt, buf, 1)\n            || !WPACKET_sub_memcpy_u8(&pkt, bytes, sizeof(bytes))\n            || !WPACKET_finish(&pkt)\n            || !WPACKET_get_total_written(&pkt, &written)\n            ||  written != sizeof(submem)\n            ||  memcmp(buf->data, &submem, written) != 0) {\n        testfail("test_WPACKET_memcpy():2 failed\\n", &pkt);\n        return 0;\n    }\n    return 1;\n}', 'int WPACKET_init_len(WPACKET *pkt, BUF_MEM *buf, size_t lenbytes)\n{\n    assert(buf != NULL);\n    if (buf == NULL)\n        return 0;\n    pkt->staticbuf = NULL;\n    pkt->buf = buf;\n    pkt->maxsize = maxmaxsize(lenbytes);\n    return wpacket_intern_init_len(pkt, lenbytes);\n}', 'int WPACKET_memcpy(WPACKET *pkt, const void *src, size_t len)\n{\n    unsigned char *dest;\n    if (len == 0)\n        return 1;\n    if (!WPACKET_allocate_bytes(pkt, len, &dest))\n        return 0;\n    memcpy(dest, src, len);\n    return 1;\n}', 'int WPACKET_finish(WPACKET *pkt)\n{\n    int ret;\n    if (pkt->subs == NULL || pkt->subs->parent != NULL)\n        return 0;\n    ret = wpacket_intern_close(pkt, pkt->subs, 1);\n    if (ret) {\n        OPENSSL_free(pkt->subs);\n        pkt->subs = NULL;\n    }\n    return ret;\n}', 'static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)\n{\n    size_t packlen = pkt->written - sub->pwritten;\n    if (packlen == 0\n            && (sub->flags & WPACKET_FLAGS_NON_ZERO_LENGTH) != 0)\n        return 0;\n    if (packlen == 0\n            && sub->flags & WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH) {\n        if (!doclose)\n            return 0;\n        if ((pkt->curr - sub->lenbytes) == sub->packet_len) {\n            pkt->written -= sub->lenbytes;\n            pkt->curr -= sub->lenbytes;\n        }\n        sub->packet_len = 0;\n        sub->lenbytes = 0;\n    }\n    if (sub->lenbytes > 0\n                && !put_value(&GETBUF(pkt)[sub->packet_len], packlen,\n                              sub->lenbytes))\n            return 0;\n    if (doclose) {\n        pkt->subs = sub->parent;\n        OPENSSL_free(sub);\n    }\n    return 1;\n}']