ssl/record/ssl3_record.c:547: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [256, 320]):unsigned64 by call to `ssl3_cbc_copy_mac`.
Showing all 9 steps of the trace


ssl/record/ssl3_record.c:256:29: Call
254.                   if (!PACKET_get_1(&pkt, &type)
255.                           || !PACKET_get_net_2(&pkt, &version)
256.                           || !PACKET_get_net_2_len(&pkt, &thisrr->length)) {
                                   ^
257.                       al = SSL_AD_DECODE_ERROR;
258.                       SSLerr(SSL_F_SSL3_GET_RECORD, ERR_R_INTERNAL_ERROR);

ssl/packet_locl.h:164:8: Parameter `*data`
  162.   
  163.   /* Same as PACKET_get_net_2() but for a size_t */
  164.   __owur static ossl_inline int PACKET_get_net_2_len(PACKET *pkt, size_t *data)
                ^
  165.   {
  166.       unsigned int i;

ssl/record/ssl3_record.c:412:9: Assignment
410.           /* decrypt in place in 'thisrr->input' */
411.           thisrr->data = thisrr->input;
412.           thisrr->orig_len = thisrr->length;
               ^
413.   
414.           /* Mark this record as not read by upper layers yet */

ssl/record/ssl3_record.c:547:22: Call
545.                    */
546.                   mac = mac_tmp;
547.                   if (!ssl3_cbc_copy_mac(mac_tmp, thisrr, mac_size)) {
                            ^
548.                       al = SSL_AD_INTERNAL_ERROR;
549.                       SSLerr(SSL_F_SSL3_GET_RECORD, ERR_R_INTERNAL_ERROR);

ssl/record/ssl3_record.c:1420:1: <LHS trace>
1418.   #define CBC_MAC_ROTATE_IN_PLACE
1419.   
1420. > int ssl3_cbc_copy_mac(unsigned char *out,
1421.                          const SSL3_RECORD *rec, size_t md_size)
1422.   {

ssl/record/ssl3_record.c:1420:1: Parameter `md_size`
  1418.   #define CBC_MAC_ROTATE_IN_PLACE
  1419.   
  1420. > int ssl3_cbc_copy_mac(unsigned char *out,
  1421.                          const SSL3_RECORD *rec, size_t md_size)
  1422.   {

ssl/record/ssl3_record.c:1420:1: <RHS trace>
1418.   #define CBC_MAC_ROTATE_IN_PLACE
1419.   
1420. > int ssl3_cbc_copy_mac(unsigned char *out,
1421.                          const SSL3_RECORD *rec, size_t md_size)
1422.   {

ssl/record/ssl3_record.c:1420:1: Parameter `md_size`
  1418.   #define CBC_MAC_ROTATE_IN_PLACE
  1419.   
  1420. > int ssl3_cbc_copy_mac(unsigned char *out,
  1421.                          const SSL3_RECORD *rec, size_t md_size)
  1422.   {

ssl/record/ssl3_record.c:1454:9: Binary operation: ([0, +oo] - [256, 320]):unsigned64 by call to `ssl3_cbc_copy_mac` 
  1452.       /* This information is public so it's safe to branch based on it. */
  1453.       if (rec->orig_len > md_size + 255 + 1)
  1454.           scan_start = rec->orig_len - (md_size + 255 + 1);
                  ^
  1455.   
  1456.       in_mac = 0;
