ssl/d1_pkt.c:319: error: INTEGER_OVERFLOW_L2
  ([0, 17727] - [0, 17728]):unsigned32 by call to `dtls1_process_record`.
Showing all 15 steps of the trace


ssl/d1_pkt.c:303:1: Parameter `s->s3->rrec.length`
301.                      &((s)->d1->processed_rcds))
302.   
303. > static int
304.   dtls1_process_buffered_records(SSL *s)
305.       {

ssl/d1_pkt.c:319:20: Call
317.               {
318.               dtls1_get_unprocessed_record(s);
319.               if ( ! dtls1_process_record(s))
                          ^
320.                   return(0);
321.               if(dtls1_buffer_record(s, &(s->d1->processed_rcds),

ssl/d1_pkt.c:381:1: Parameter `s->s3->rrec.length`
  379.   #endif
  380.   
  381. > static int
  382.   dtls1_process_record(SSL *s)
  383.   {

ssl/d1_pkt.c:474:4: Call
  472.   			 * */
  473.   			mac = mac_tmp;
  474.   			ssl3_cbc_copy_mac(mac_tmp, rr, mac_size);
            ^
  475.   			rr->length -= mac_size;
  476.   			}

ssl/s3_cbc.c:220:1: Parameter `md_size`
    218.   #define CBC_MAC_ROTATE_IN_PLACE
    219.   
    220. > void ssl3_cbc_copy_mac(unsigned char* out,
    221.   		       const SSL3_RECORD *rec,
    222.   		       unsigned md_size)

ssl/s3_cbc.c:266:29: Call
    264.   		{
    265.   		unsigned char mac_started = constant_time_ge_8(i, mac_start);
    266.   		unsigned char mac_ended = constant_time_ge_8(i, mac_end);
                                       ^
    267.   		unsigned char b = rec->data[i];
    268.   		rotated_mac[j++] |= b & mac_started & ~mac_ended;

crypto/constant_time_locl.h:150:1: Parameter `a`
      148.   	}
      149.   
      150. > static inline unsigned char constant_time_ge_8(unsigned int a, unsigned int b)
      151.   	{
      152.   	return (unsigned char)(constant_time_ge(a, b));

crypto/constant_time_locl.h:152:25: Call
      150.   static inline unsigned char constant_time_ge_8(unsigned int a, unsigned int b)
      151.   	{
      152.   	return (unsigned char)(constant_time_ge(a, b));
                                     ^
      153.   	}
      154.   

crypto/constant_time_locl.h:145:1: Parameter `a`
        143.   	}
        144.   
        145. > static inline unsigned int constant_time_ge(unsigned int a, unsigned int b)
        146.   	{
        147.   	return ~constant_time_lt(a, b);

crypto/constant_time_locl.h:147:10: Call
        145.   static inline unsigned int constant_time_ge(unsigned int a, unsigned int b)
        146.   	{
        147.   	return ~constant_time_lt(a, b);
                        ^
        148.   	}
        149.   

crypto/constant_time_locl.h:135:1: <LHS trace>
133.   	}
134.   
135. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
136.   	{
137.   	return constant_time_msb(a^((a^b)|((a-b)^b)));

crypto/constant_time_locl.h:135:1: Parameter `a`
          133.   	}
          134.   
          135. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
          136.   	{
          137.   	return constant_time_msb(a^((a^b)|((a-b)^b)));

crypto/constant_time_locl.h:135:1: <RHS trace>
133.   	}
134.   
135. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
136.   	{
137.   	return constant_time_msb(a^((a^b)|((a-b)^b)));

crypto/constant_time_locl.h:135:1: Parameter `b`
          133.   	}
          134.   
          135. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
          136.   	{
          137.   	return constant_time_msb(a^((a^b)|((a-b)^b)));

crypto/constant_time_locl.h:137:9: Binary operation: ([0, 17727] - [0, 17728]):unsigned32 by call to `dtls1_process_record` 
          135.   static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
          136.   	{
          137.   	return constant_time_msb(a^((a^b)|((a-b)^b)));
                         ^
          138.   	}
          139.   
