ssl/record/ssl3_record.c:1955: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 17728]):unsigned64 by call to `dtls1_process_record`.
Showing all 10 steps of the trace


ssl/record/ssl3_record.c:1776:1: Parameter `s->session->ext.max_fragment_len_mode`
1774.    */
1775.   /* used only by dtls1_read_bytes */
1776. > int dtls1_get_record(SSL *s)
1777.   {
1778.       int ssl_major, ssl_minor;

ssl/record/ssl3_record.c:1955:10: Call
1953.       }
1954.   
1955.       if (!dtls1_process_record(s, bitmap)) {
                 ^
1956.           if (ossl_statem_in_error(s)) {
1957.               /* dtls1_process_record() called SSLfatal */

ssl/record/ssl3_record.c:1553:1: Parameter `s->rlayer.rrec.length`
  1551.   }
  1552.   
  1553. > int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap)
  1554.   {
  1555.       int i;

ssl/record/ssl3_record.c:1689:18: Call
  1687.                */
  1688.               mac = mac_tmp;
  1689.               if (!ssl3_cbc_copy_mac(mac_tmp, rr, mac_size)) {
                           ^
  1690.                   SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
  1691.                            ERR_R_INTERNAL_ERROR);

ssl/record/ssl3_record.c:1478:1: <LHS trace>
1476.   #define CBC_MAC_ROTATE_IN_PLACE
1477.   
1478. > int ssl3_cbc_copy_mac(unsigned char *out,
1479.                          const SSL3_RECORD *rec, size_t md_size)
1480.   {

ssl/record/ssl3_record.c:1478:1: Parameter `rec->length`
    1476.   #define CBC_MAC_ROTATE_IN_PLACE
    1477.   
    1478. > int ssl3_cbc_copy_mac(unsigned char *out,
    1479.                          const SSL3_RECORD *rec, size_t md_size)
    1480.   {

ssl/record/ssl3_record.c:1491:5: Assignment
    1489.        * mac_end is the index of |rec->data| just after the end of the MAC.
    1490.        */
    1491.       size_t mac_end = rec->length;
                ^
    1492.       size_t mac_start = mac_end - md_size;
    1493.       size_t in_mac;

ssl/record/ssl3_record.c:1478:1: <RHS trace>
1476.   #define CBC_MAC_ROTATE_IN_PLACE
1477.   
1478. > int ssl3_cbc_copy_mac(unsigned char *out,
1479.                          const SSL3_RECORD *rec, size_t md_size)
1480.   {

ssl/record/ssl3_record.c:1478:1: Parameter `md_size`
    1476.   #define CBC_MAC_ROTATE_IN_PLACE
    1477.   
    1478. > int ssl3_cbc_copy_mac(unsigned char *out,
    1479.                          const SSL3_RECORD *rec, size_t md_size)
    1480.   {

ssl/record/ssl3_record.c:1492:5: Binary operation: ([0, +oo] - [0, 17728]):unsigned64 by call to `dtls1_process_record` 
    1490.        */
    1491.       size_t mac_end = rec->length;
    1492.       size_t mac_start = mac_end - md_size;
                ^
    1493.       size_t in_mac;
    1494.       /*
