ssl/s3_clnt.c:428: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 10):unsigned64 by call to `ssl3_send_client_certificate`.
Showing all 13 steps of the trace


ssl/s3_clnt.c:186:1: Parameter `s->init_buf->length`
184.   			ssl3_get_client_method)
185.   
186. > int ssl3_connect(SSL *s)
187.   	{
188.   	BUF_MEM *buf=NULL;

ssl/s3_clnt.c:428:8: Call
426.   		case SSL3_ST_CW_CERT_C:
427.   		case SSL3_ST_CW_CERT_D:
428.   			ret=ssl3_send_client_certificate(s);
              ^
429.   			if (ret <= 0) goto end;
430.   			s->state=SSL3_ST_CW_KEY_EXCH_A;

ssl/s3_clnt.c:3301:1: Parameter `s->init_buf->length`
  3299.   	}
  3300.   
  3301. > int ssl3_send_client_certificate(SSL *s)
  3302.   	{
  3303.   	X509 *x509=NULL;

ssl/s3_clnt.c:3383:8: Call
  3381.   		{
  3382.   		s->state=SSL3_ST_CW_CERT_D;
  3383.   		if (!ssl3_output_cert_chain(s,
                 ^
  3384.   			(s->s3->tmp.cert_req == 2)?NULL:s->cert->key))
  3385.   			{

ssl/s3_both.c:323:1: Parameter `s->init_buf->length`
    321.   	}
    322.   
    323. > unsigned long ssl3_output_cert_chain(SSL *s, CERT_PKEY *cpk)
    324.   	{
    325.   	unsigned char *p;

ssl/s3_both.c:328:7: Call
    326.   	unsigned long l = 3 + SSL_HM_HEADER_LENGTH(s);
    327.   
    328.   	if (!ssl_add_cert_chain(s, cpk, &l))
                 ^
    329.   		return 0;
    330.   

ssl/ssl_cert.c:1114:1: Parameter `s->init_buf->length`
      1112.   
      1113.   /* Add certificate chain to internal SSL BUF_MEM strcuture */
      1114. > int ssl_add_cert_chain(SSL *s, CERT_PKEY *cpk, unsigned long *l)
      1115.   	{
      1116.   	BUF_MEM *buf = s->init_buf;

ssl/ssl_cert.c:1124:7: Call
      1122.   
      1123.   	/* TLSv1 sends a chain with nothing in it, instead of an alert */
      1124.   	if (!BUF_MEM_grow_clean(buf,10))
                    ^
      1125.   		{
      1126.   		SSLerr(SSL_F_SSL_ADD_CERT_CHAIN,ERR_R_BUF_LIB);

crypto/buffer/buffer.c:139:1: <LHS trace>
137.   	}
138.   
139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
140.   	{
141.   	char *ret;

crypto/buffer/buffer.c:139:1: Parameter `len`
        137.   	}
        138.   
        139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
        140.   	{
        141.   	char *ret;

crypto/buffer/buffer.c:139:1: <RHS trace>
137.   	}
138.   
139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
140.   	{
141.   	char *ret;

crypto/buffer/buffer.c:139:1: Parameter `len`
        137.   	}
        138.   
        139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
        140.   	{
        141.   	char *ret;

crypto/buffer/buffer.c:146:3: Binary operation: ([0, +oo] - 10):unsigned64 by call to `ssl3_send_client_certificate` 
        144.   	if (str->length >= len)
        145.   		{
        146.   		memset(&str->data[len],0,str->length-len);
                 ^
        147.   		str->length=len;
        148.   		return(len);
