crypto/rand/drbg_ctr.c:196: error: INTEGER_OVERFLOW_L2
  ([1, `in1len`] - 8):unsigned64 by call to `ctr_BCC_update`.
Showing all 7 steps of the trace


crypto/rand/drbg_ctr.c:165:8: Parameter `in1len`
163.   }
164.   
165.   __owur static int ctr_df(RAND_DRBG_CTR *ctr,
              ^
166.                            const unsigned char *in1, size_t in1len,
167.                            const unsigned char *in2, size_t in2len,

crypto/rand/drbg_ctr.c:196:10: Call
194.       *p = (unsigned char)((ctr->keylen + 16) & 0xff);
195.       ctr->bltmp_pos = 8;
196.       if (!ctr_BCC_update(ctr, in1, in1len)
                ^
197.           || !ctr_BCC_update(ctr, in2, in2len)
198.           || !ctr_BCC_update(ctr, in3, in3len)

crypto/rand/drbg_ctr.c:120:8: <LHS trace>
118.    * Process several blocks into BCC algorithm, some possibly partial
119.    */
120.   __owur static int ctr_BCC_update(RAND_DRBG_CTR *ctr,
              ^
121.                                    const unsigned char *in, size_t inlen)
122.   {

crypto/rand/drbg_ctr.c:120:8: Parameter `inlen`
  118.    * Process several blocks into BCC algorithm, some possibly partial
  119.    */
  120.   __owur static int ctr_BCC_update(RAND_DRBG_CTR *ctr,
                ^
  121.                                    const unsigned char *in, size_t inlen)
  122.   {

crypto/rand/drbg_ctr.c:120:8: <RHS trace>
118.    * Process several blocks into BCC algorithm, some possibly partial
119.    */
120.   __owur static int ctr_BCC_update(RAND_DRBG_CTR *ctr,
              ^
121.                                    const unsigned char *in, size_t inlen)
122.   {

crypto/rand/drbg_ctr.c:120:8: Parameter `inlen`
  118.    * Process several blocks into BCC algorithm, some possibly partial
  119.    */
  120.   __owur static int ctr_BCC_update(RAND_DRBG_CTR *ctr,
                ^
  121.                                    const unsigned char *in, size_t inlen)
  122.   {

crypto/rand/drbg_ctr.c:136:13: Binary operation: ([1, in1len] - 8):unsigned64 by call to `ctr_BCC_update` 
  134.                   return 0;
  135.               ctr->bltmp_pos = 0;
  136.               inlen -= left;
                     ^
  137.               in += left;
  138.           }
