ssl/record/ssl3_record.c:1955: error: INTEGER_OVERFLOW_L2
  ([0, 17728] - [256, 17984]):unsigned64 by call to `dtls1_process_record`.
Showing all 10 steps of the trace


ssl/record/ssl3_record.c:1776:1: Parameter `s->session->ext.max_fragment_len_mode`
1774.    */
1775.   /* used only by dtls1_read_bytes */
1776. > int dtls1_get_record(SSL *s)
1777.   {
1778.       int ssl_major, ssl_minor;

ssl/record/ssl3_record.c:1955:10: Call
1953.       }
1954.   
1955.       if (!dtls1_process_record(s, bitmap)) {
                 ^
1956.           if (ossl_statem_in_error(s)) {
1957.               /* dtls1_process_record() called SSLfatal */

ssl/record/ssl3_record.c:1553:1: Parameter `s->rlayer.rrec.length`
  1551.   }
  1552.   
  1553. > int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap)
  1554.   {
  1555.       int i;

ssl/record/ssl3_record.c:1593:5: Assignment
  1591.       /* decrypt in place in 'rr->input' */
  1592.       rr->data = rr->input;
  1593.       rr->orig_len = rr->length;
              ^
  1594.   
  1595.       if (SSL_READ_ETM(s) && s->read_hash) {

ssl/record/ssl3_record.c:1689:18: Call
  1687.                */
  1688.               mac = mac_tmp;
  1689.               if (!ssl3_cbc_copy_mac(mac_tmp, rr, mac_size)) {
                           ^
  1690.                   SSLfatal(s, SSL_AD_INTERNAL_ERROR, SSL_F_DTLS1_PROCESS_RECORD,
  1691.                            ERR_R_INTERNAL_ERROR);

ssl/record/ssl3_record.c:1478:1: <LHS trace>
1476.   #define CBC_MAC_ROTATE_IN_PLACE
1477.   
1478. > int ssl3_cbc_copy_mac(unsigned char *out,
1479.                          const SSL3_RECORD *rec, size_t md_size)
1480.   {

ssl/record/ssl3_record.c:1478:1: Parameter `md_size`
    1476.   #define CBC_MAC_ROTATE_IN_PLACE
    1477.   
    1478. > int ssl3_cbc_copy_mac(unsigned char *out,
    1479.                          const SSL3_RECORD *rec, size_t md_size)
    1480.   {

ssl/record/ssl3_record.c:1478:1: <RHS trace>
1476.   #define CBC_MAC_ROTATE_IN_PLACE
1477.   
1478. > int ssl3_cbc_copy_mac(unsigned char *out,
1479.                          const SSL3_RECORD *rec, size_t md_size)
1480.   {

ssl/record/ssl3_record.c:1478:1: Parameter `md_size`
    1476.   #define CBC_MAC_ROTATE_IN_PLACE
    1477.   
    1478. > int ssl3_cbc_copy_mac(unsigned char *out,
    1479.                          const SSL3_RECORD *rec, size_t md_size)
    1480.   {

ssl/record/ssl3_record.c:1512:9: Binary operation: ([0, 17728] - [256, 17984]):unsigned64 by call to `dtls1_process_record` 
    1510.       /* This information is public so it's safe to branch based on it. */
    1511.       if (rec->orig_len > md_size + 255 + 1)
    1512.           scan_start = rec->orig_len - (md_size + 255 + 1);
                    ^
    1513.   
    1514.       in_mac = 0;
