ssl/s3_pkt.c:457: error: INTEGER_OVERFLOW_L2
  ([0, 34111] - [0, 34112]):unsigned32 by call to `ssl3_cbc_copy_mac`.
Showing all 9 steps of the trace


ssl/s3_pkt.c:284:1: Parameter `s->packet_length`
282.    */
283.   /* used only by ssl3_read_bytes */
284. > static int ssl3_get_record(SSL *s)
285.   	{
286.   	int ssl_major,ssl_minor,al;

ssl/s3_pkt.c:457:4: Call
455.   			 * */
456.   			mac = mac_tmp;
457.   			ssl3_cbc_copy_mac(mac_tmp, rr, mac_size);
          ^
458.   			rr->length -= mac_size;
459.   			}

ssl/s3_cbc.c:251:1: Parameter `md_size`
  249.   #define CBC_MAC_ROTATE_IN_PLACE
  250.   
  251. > void ssl3_cbc_copy_mac(unsigned char* out,
  252.   		       const SSL3_RECORD *rec,
  253.   		       unsigned md_size)

ssl/s3_cbc.c:297:29: Call
  295.   		{
  296.   		unsigned char mac_started = constant_time_ge(i, mac_start);
  297.   		unsigned char mac_ended = constant_time_ge(i, mac_end);
                                     ^
  298.   		unsigned char b = rec->data[i];
  299.   		rotated_mac[j++] |= b & mac_started & ~mac_ended;

ssl/s3_cbc.c:87:1: <LHS trace>
85.   
86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
87. > static unsigned constant_time_ge(unsigned a, unsigned b)
88.   	{
89.   	a -= b;

ssl/s3_cbc.c:87:1: Parameter `a`
    85.   
    86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
    87. > static unsigned constant_time_ge(unsigned a, unsigned b)
    88.   	{
    89.   	a -= b;

ssl/s3_cbc.c:87:1: <RHS trace>
85.   
86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
87. > static unsigned constant_time_ge(unsigned a, unsigned b)
88.   	{
89.   	a -= b;

ssl/s3_cbc.c:87:1: Parameter `b`
    85.   
    86.   /* constant_time_ge returns 0xff if a>=b and 0x00 otherwise. */
    87. > static unsigned constant_time_ge(unsigned a, unsigned b)
    88.   	{
    89.   	a -= b;

ssl/s3_cbc.c:89:2: Binary operation: ([0, 34111] - [0, 34112]):unsigned32 by call to `ssl3_cbc_copy_mac` 
    87.   static unsigned constant_time_ge(unsigned a, unsigned b)
    88.   	{
    89.   	a -= b;
           ^
    90.   	return DUPLICATE_MSB_TO_ALL(~a);
    91.   	}
