ssl/record/rec_layer_s3.c:613: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `do_ssl3_write`.
Showing all 9 steps of the trace


ssl/record/rec_layer_s3.c:337:1: Parameter `s->rlayer.numwpipes`
335.    * not all data has been sent or non-blocking IO.
336.    */
337. > int ssl3_write_bytes(SSL *s, int type, const void *buf_, size_t len,
338.                        size_t *written)
339.   {

ssl/record/rec_layer_s3.c:613:13: Call
611.           }
612.   
613.           i = do_ssl3_write(s, type, &(buf[tot]), pipelens, numpipes, 0,
                   ^
614.                             &tmpwrit);
615.           if (i <= 0) {

ssl/record/rec_layer_s3.c:644:1: Parameter `s->rlayer.numwpipes`
  642.   }
  643.   
  644. > int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
  645.                     size_t *pipelens, size_t numpipes,
  646.                     int create_empty_fragment, size_t *written)

ssl/record/rec_layer_s3.c:668:9: Call
  666.        * will happen with non blocking IO
  667.        */
  668.       if (RECORD_LAYER_write_pending(&s->rlayer)) {
                 ^
  669.           /* Calls SSLfatal() as required */
  670.           return ssl3_write_pending(s, type, buf, totlen, written);

ssl/record/rec_layer_s3.c:95:1: Parameter `rl->numwpipes`
    93.   }
    94.   
    95. > int RECORD_LAYER_write_pending(const RECORD_LAYER *rl)
    96.   {
    97.       return (rl->numwpipes > 0)

ssl/record/rec_layer_s3.c:670:16: Call
  668.       if (RECORD_LAYER_write_pending(&s->rlayer)) {
  669.           /* Calls SSLfatal() as required */
  670.           return ssl3_write_pending(s, type, buf, totlen, written);
                        ^
  671.       }
  672.   

ssl/record/rec_layer_s3.c:1108:1: <LHS trace>
1106.    * Return values are as per SSL_write()
1107.    */
1108. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
1109.                          size_t *written)
1110.   {

ssl/record/rec_layer_s3.c:1108:1: Parameter `s->rlayer.numwpipes`
    1106.    * Return values are as per SSL_write()
    1107.    */
    1108. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
    1109.                          size_t *written)
    1110.   {

ssl/record/rec_layer_s3.c:1128:16: Binary operation: ([0, +oo] - 1):unsigned64 by call to `do_ssl3_write` 
    1126.           /* Loop until we find a buffer we haven't written out yet */
    1127.           if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
    1128.               && currbuf < s->rlayer.numwpipes - 1) {
                           ^
    1129.               currbuf++;
    1130.               continue;
