ssl/ssl_lib.c:4487: error: INTEGER_OVERFLOW_L2
  ([1, +oo] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list`.
Showing all 12 steps of the trace


ssl/ssl_lib.c:4485:10: Call
4483.       PACKET pkt;
4484.   
4485.       if (!PACKET_buf_init(&pkt, bytes, len))
                 ^
4486.           return 0;
4487.       return bytes_to_cipher_list(s, &pkt, sk, scsvs, isv2format, &alert);

ssl/packet_locl.h:72:8: Parameter `pkt->remaining`
  70.    * is being used.
  71.    */
  72.   __owur static ossl_inline int PACKET_buf_init(PACKET *pkt,
               ^
  73.                                                 const unsigned char *buf,
  74.                                                 size_t len)

ssl/ssl_lib.c:4487:12: Call
4485.       if (!PACKET_buf_init(&pkt, bytes, len))
4486.           return 0;
4487.       return bytes_to_cipher_list(s, &pkt, sk, scsvs, isv2format, &alert);
                   ^
4488.   }
4489.   

ssl/ssl_lib.c:4490:1: Parameter `cipher_suites->remaining`
  4488.   }
  4489.   
  4490. > int bytes_to_cipher_list(SSL *s, PACKET *cipher_suites,
  4491.                            STACK_OF(SSL_CIPHER) **skp,
  4492.                            STACK_OF(SSL_CIPHER) **scsvs_out,

ssl/ssl_lib.c:4525:12: Call
  4523.       }
  4524.   
  4525.       while (PACKET_copy_bytes(cipher_suites, cipher, n)) {
                     ^
  4526.           /*
  4527.            * SSLv3 ciphers wrapped in an SSLv2-compatible ClientHello have the

ssl/packet_locl.h:379:8: Parameter `len`
    377.    * The caller is responsible for ensuring that |data| can hold |len| bytes.
    378.    */
    379.   __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
                  ^
    380.                                                   unsigned char *data, size_t len)
    381.   {

ssl/packet_locl.h:385:5: Call
    383.           return 0;
    384.   
    385.       packet_forward(pkt, len);
               ^
    386.   
    387.       return 1;

ssl/packet_locl.h:33:1: <LHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `pkt->remaining`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:33:1: <RHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `len`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:36:5: Binary operation: ([1, +oo] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list` 
      34.   {
      35.       pkt->curr += len;
      36.       pkt->remaining -= len;
                ^
      37.   }
      38.   
