ssl/record/ssl3_record.c:545: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 64]):unsigned64 by call to `ssl3_cbc_copy_mac`.
Showing all 9 steps of the trace


ssl/record/ssl3_record.c:257:29: Call
255.                   if (!PACKET_get_1(&pkt, &type)
256.                           || !PACKET_get_net_2(&pkt, &version)
257.                           || !PACKET_get_net_2_len(&pkt, &thisrr->length)) {
                                   ^
258.                       al = SSL_AD_DECODE_ERROR;
259.                       SSLerr(SSL_F_SSL3_GET_RECORD, ERR_R_INTERNAL_ERROR);

ssl/packet_locl.h:164:8: Parameter `*data`
  162.   
  163.   /* Same as PACKET_get_net_2() but for a size_t */
  164.   __owur static ossl_inline int PACKET_get_net_2_len(PACKET *pkt, size_t *data)
                ^
  165.   {
  166.       unsigned int i;

ssl/record/ssl3_record.c:545:17: Call
543.                    */
544.                   mac = mac_tmp;
545.                   ssl3_cbc_copy_mac(mac_tmp, thisrr, mac_size);
                       ^
546.                   thisrr->length -= mac_size;
547.               } else {

ssl/record/ssl3_record.c:1407:1: <LHS trace>
1405.   #define CBC_MAC_ROTATE_IN_PLACE
1406.   
1407. > void ssl3_cbc_copy_mac(unsigned char *out,
1408.                          const SSL3_RECORD *rec, size_t md_size)
1409.   {

ssl/record/ssl3_record.c:1407:1: Parameter `rec->length`
  1405.   #define CBC_MAC_ROTATE_IN_PLACE
  1406.   
  1407. > void ssl3_cbc_copy_mac(unsigned char *out,
  1408.                          const SSL3_RECORD *rec, size_t md_size)
  1409.   {

ssl/record/ssl3_record.c:1420:5: Assignment
  1418.        * mac_end is the index of |rec->data| just after the end of the MAC.
  1419.        */
  1420.       size_t mac_end = rec->length;
              ^
  1421.       size_t mac_start = mac_end - md_size;
  1422.       size_t in_mac;

ssl/record/ssl3_record.c:1407:1: <RHS trace>
1405.   #define CBC_MAC_ROTATE_IN_PLACE
1406.   
1407. > void ssl3_cbc_copy_mac(unsigned char *out,
1408.                          const SSL3_RECORD *rec, size_t md_size)
1409.   {

ssl/record/ssl3_record.c:1407:1: Parameter `md_size`
  1405.   #define CBC_MAC_ROTATE_IN_PLACE
  1406.   
  1407. > void ssl3_cbc_copy_mac(unsigned char *out,
  1408.                          const SSL3_RECORD *rec, size_t md_size)
  1409.   {

ssl/record/ssl3_record.c:1421:5: Binary operation: ([0, +oo] - [0, 64]):unsigned64 by call to `ssl3_cbc_copy_mac` 
  1419.        */
  1420.       size_t mac_end = rec->length;
  1421.       size_t mac_start = mac_end - md_size;
              ^
  1422.       size_t in_mac;
  1423.       /*
