ssl/statem/statem_clnt.c:894: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 256]):unsigned64 by call to `PACKET_copy_bytes`.
Showing all 10 steps of the trace


ssl/statem/statem_clnt.c:881:13: Call
879.   
880.       if (!PACKET_forward(pkt, 2)
881.           || !PACKET_get_length_prefixed_1(pkt, &cookiepkt)) {
                   ^
882.           al = SSL_AD_DECODE_ERROR;
883.           SSLerr(SSL_F_DTLS_PROCESS_HELLO_VERIFY, SSL_R_LENGTH_MISMATCH);

ssl/packet_locl.h:436:8: Parameter `subpkt->remaining`
  434.    * Upon failure, the original |pkt| and |subpkt| are not modified.
  435.    */
  436.   __owur static ossl_inline int PACKET_get_length_prefixed_1(PACKET *pkt,
                ^
  437.                                                              PACKET *subpkt)
  438.   {

ssl/statem/statem_clnt.c:894:10: Call
892.       }
893.   
894.       if (!PACKET_copy_bytes(&cookiepkt, s->d1->cookie, cookie_len)) {
                ^
895.           al = SSL_AD_DECODE_ERROR;
896.           SSLerr(SSL_F_DTLS_PROCESS_HELLO_VERIFY, SSL_R_LENGTH_MISMATCH);

ssl/packet_locl.h:331:8: Parameter `len`
  329.    * The caller is responsible for ensuring that |data| can hold |len| bytes.
  330.    */
  331.   __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
                ^
  332.                                                   unsigned char *data, size_t len)
  333.   {

ssl/packet_locl.h:337:5: Call
  335.           return 0;
  336.   
  337.       packet_forward(pkt, len);
             ^
  338.   
  339.       return 1;

ssl/packet_locl.h:33:1: <LHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `pkt->remaining`
    31.   
    32.   /* Internal unchecked shorthand; don't use outside this file. */
    33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
    34.   {
    35.       pkt->curr += len;

ssl/packet_locl.h:33:1: <RHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `len`
    31.   
    32.   /* Internal unchecked shorthand; don't use outside this file. */
    33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
    34.   {
    35.       pkt->curr += len;

ssl/packet_locl.h:36:5: Binary operation: ([0, +oo] - [0, 256]):unsigned64 by call to `PACKET_copy_bytes` 
    34.   {
    35.       pkt->curr += len;
    36.       pkt->remaining -= len;
              ^
    37.   }
    38.   

static ossl_inline void packet_forward(PACKET *pkt, size_t len)
{
    pkt->curr += len;
    pkt->remaining -= len;
}
['MSG_PROCESS_RETURN dtls_process_hello_verify(SSL *s, PACKET *pkt)\n{\n    int al;\n    unsigned int cookie_len;\n    PACKET cookiepkt;\n    if (!PACKET_forward(pkt, 2)\n        || !PACKET_get_length_prefixed_1(pkt, &cookiepkt)) {\n        al = SSL_AD_DECODE_ERROR;\n        SSLerr(SSL_F_DTLS_PROCESS_HELLO_VERIFY, SSL_R_LENGTH_MISMATCH);\n        goto f_err;\n    }\n    cookie_len = PACKET_remaining(&cookiepkt);\n    if (cookie_len > sizeof(s->d1->cookie)) {\n        al = SSL_AD_ILLEGAL_PARAMETER;\n        SSLerr(SSL_F_DTLS_PROCESS_HELLO_VERIFY, SSL_R_LENGTH_TOO_LONG);\n        goto f_err;\n    }\n    if (!PACKET_copy_bytes(&cookiepkt, s->d1->cookie, cookie_len)) {\n        al = SSL_AD_DECODE_ERROR;\n        SSLerr(SSL_F_DTLS_PROCESS_HELLO_VERIFY, SSL_R_LENGTH_MISMATCH);\n        goto f_err;\n    }\n    s->d1->cookie_len = cookie_len;\n    return MSG_PROCESS_FINISHED_READING;\n f_err:\n    ssl3_send_alert(s, SSL3_AL_FATAL, al);\n    ossl_statem_set_error(s);\n    return MSG_PROCESS_ERROR;\n}', 'static ossl_inline void packet_forward(PACKET *pkt, size_t len)\n{\n    pkt->curr += len;\n    pkt->remaining -= len;\n}']