crypto/pem/pvkfmt.c:834: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 8):unsigned32 by call to `do_PVK_body`.
Showing all 6 steps of the trace


crypto/pem/pvkfmt.c:819:7: Call
817.   	p = pvk_hdr;
818.   
819.   	if (!do_PVK_header(&p, 24, 0, &saltlen, &keylen))
             ^
820.   		return 0;
821.   	buflen = (int) keylen + saltlen;

crypto/pem/pvkfmt.c:659:1: Parameter `*pkeylen`
  657.   #ifndef OPENSSL_NO_RC4
  658.   
  659. > static int do_PVK_header(const unsigned char **in, unsigned int length,
  660.   		int skip_magic,
  661.   	       	unsigned int *psaltlen, unsigned int *pkeylen)

crypto/pem/pvkfmt.c:834:8: Call
832.   		goto err;
833.   		}
834.   	ret = do_PVK_body(&p, saltlen, keylen, cb, u);
              ^
835.   
836.   	err:

crypto/pem/pvkfmt.c:725:1: <LHS trace>
723.   	
724.   
725. > static EVP_PKEY *do_PVK_body(const unsigned char **in,
726.   		unsigned int saltlen, unsigned int keylen,
727.   		pem_password_cb *cb, void *u)

crypto/pem/pvkfmt.c:725:1: Parameter `keylen`
  723.   	
  724.   
  725. > static EVP_PKEY *do_PVK_body(const unsigned char **in,
  726.   		unsigned int saltlen, unsigned int keylen,
  727.   		pem_password_cb *cb, void *u)

crypto/pem/pvkfmt.c:762:3: Binary operation: ([0, +oo] - 8):unsigned32 by call to `do_PVK_body` 
  760.   		memcpy(enctmp, p, 8);
  761.   		p += 8;
  762.   		inlen = keylen - 8;
           ^
  763.   		q = enctmp + 8;
  764.   		if (!EVP_DecryptInit_ex(&cctx, EVP_rc4(), NULL, keybuf, NULL))
