ssl/d1_pkt.c:314: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 17728]):unsigned32 by call to `dtls1_process_record`.
Showing all 11 steps of the trace


ssl/d1_pkt.c:298:1: Parameter `s->s3->rrec.length`
296.                      &((s)->d1->processed_rcds))
297.   
298. > static int
299.   dtls1_process_buffered_records(SSL *s)
300.       {

ssl/d1_pkt.c:314:20: Call
312.               {
313.               dtls1_get_unprocessed_record(s);
314.               if ( ! dtls1_process_record(s))
                          ^
315.                   return(0);
316.               dtls1_buffer_record(s, &(s->d1->processed_rcds), 

ssl/d1_pkt.c:375:1: Parameter `s->s3->rrec.length`
  373.   #endif
  374.   
  375. > static int
  376.   dtls1_process_record(SSL *s)
  377.   {

ssl/d1_pkt.c:470:4: Call
  468.   			 * */
  469.   			mac = mac_tmp;
  470.   			ssl3_cbc_copy_mac(mac_tmp, rr, mac_size, orig_len);
            ^
  471.   			rr->length -= mac_size;
  472.   			}

ssl/s3_cbc.c:254:1: Parameter `orig_len`
    252.   #define CBC_MAC_ROTATE_IN_PLACE
    253.   
    254. > void ssl3_cbc_copy_mac(unsigned char* out,
    255.   		       const SSL3_RECORD *rec,
    256.   		       unsigned md_size,unsigned orig_len)

ssl/s3_cbc.c:300:29: Call
    298.   		{
    299.   		unsigned char mac_started = constant_time_ge(i, mac_start);
    300.   		unsigned char mac_ended = constant_time_ge(i, mac_end);
                                       ^
    301.   		unsigned char b = rec->data[i];
    302.   		rotated_mac[j++] |= b & mac_started & ~mac_ended;

ssl/s3_cbc.c:87:1: <LHS trace>
85.   
86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
87. > static unsigned constant_time_ge(unsigned a, unsigned b)
88.   	{
89.   	a -= b;

ssl/s3_cbc.c:87:1: Parameter `a`
      85.   
      86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
      87. > static unsigned constant_time_ge(unsigned a, unsigned b)
      88.   	{
      89.   	a -= b;

ssl/s3_cbc.c:87:1: <RHS trace>
85.   
86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
87. > static unsigned constant_time_ge(unsigned a, unsigned b)
88.   	{
89.   	a -= b;

ssl/s3_cbc.c:87:1: Parameter `b`
      85.   
      86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
      87. > static unsigned constant_time_ge(unsigned a, unsigned b)
      88.   	{
      89.   	a -= b;

ssl/s3_cbc.c:89:2: Binary operation: ([0, +oo] - [0, 17728]):unsigned32 by call to `dtls1_process_record` 
      87.   static unsigned constant_time_ge(unsigned a, unsigned b)
      88.   	{
      89.   	a -= b;
             ^
      90.   	return DUPLICATE_MSB_TO_ALL(~a);
      91.   	}
