ssl/statem/statem_srvr.c:1607: error: INTEGER_OVERFLOW_L2
  ([1, `s->clienthello->ciphersuites.remaining`] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list`.
Showing all 13 steps of the trace


ssl/statem/statem_srvr.c:1447:1: Parameter `s->clienthello->ciphersuites.remaining`
1445.   }
1446.   
1447. > static int tls_early_post_process_client_hello(SSL *s, int *pal)
1448.   {
1449.       unsigned int j;

ssl/statem/statem_srvr.c:1605:10: Call
1603.       }
1604.   
1605.       if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
                 ^
1606.                                 clienthello->isv2, &al) ||
1607.           !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,

ssl/ssl_lib.c:4637:1: Parameter `cipher_suites->remaining`
  4635.   #define SSLV2_CIPHER_LEN    3
  4636.   
  4637. > int ssl_cache_cipherlist(SSL *s, PACKET *cipher_suites, int sslv2format,
  4638.                            int *al)
  4639.   {

ssl/statem/statem_srvr.c:1607:10: Call
1605.       if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
1606.                                 clienthello->isv2, &al) ||
1607.           !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,
                 ^
1608.                                clienthello->isv2, &al)) {
1609.           goto err;

ssl/ssl_lib.c:4720:1: Parameter `cipher_suites->remaining`
  4718.   }
  4719.   
  4720. > int bytes_to_cipher_list(SSL *s, PACKET *cipher_suites,
  4721.                            STACK_OF(SSL_CIPHER) **skp,
  4722.                            STACK_OF(SSL_CIPHER) **scsvs_out,

ssl/ssl_lib.c:4755:12: Call
  4753.       }
  4754.   
  4755.       while (PACKET_copy_bytes(cipher_suites, cipher, n)) {
                     ^
  4756.           /*
  4757.            * SSLv3 ciphers wrapped in an SSLv2-compatible ClientHello have the

ssl/packet_locl.h:379:8: Parameter `len`
    377.    * The caller is responsible for ensuring that |data| can hold |len| bytes.
    378.    */
    379.   __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
                  ^
    380.                                                   unsigned char *data, size_t len)
    381.   {

ssl/packet_locl.h:385:5: Call
    383.           return 0;
    384.   
    385.       packet_forward(pkt, len);
               ^
    386.   
    387.       return 1;

ssl/packet_locl.h:33:1: <LHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `pkt->remaining`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:33:1: <RHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `len`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:36:5: Binary operation: ([1, s->clienthello->ciphersuites.remaining] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list` 
      34.   {
      35.       pkt->curr += len;
      36.       pkt->remaining -= len;
                ^
      37.   }
      38.   
