ssl/d1_srvr.c:425: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 10):unsigned64 by call to `dtls1_send_server_certificate`.
Showing all 13 steps of the trace


ssl/d1_srvr.c:145:1: Parameter `s->init_buf->length`
143.   			dtls1_get_server_method)
144.   
145. > int dtls1_accept(SSL *s)
146.   	{
147.   	BUF_MEM *buf;

ssl/d1_srvr.c:425:9: Call
423.   				{
424.   				dtls1_start_timer(s);
425.   				ret=dtls1_send_server_certificate(s);
               ^
426.   				if (ret <= 0) goto end;
427.   #ifndef OPENSSL_NO_TLSEXT

ssl/d1_srvr.c:1569:1: Parameter `s->init_buf->length`
  1567.   	}
  1568.   
  1569. > int dtls1_send_server_certificate(SSL *s)
  1570.   	{
  1571.   	unsigned long l;

ssl/d1_srvr.c:1588:5: Call
  1586.   			}
  1587.   
  1588.   		l=dtls1_output_cert_chain(s,cpk);
              ^
  1589.   		s->state=SSL3_ST_SW_CERT_B;
  1590.   		s->init_num=(int)l;

ssl/d1_both.c:996:1: Parameter `s->init_buf->length`
    994.   	}
    995.   
    996. > unsigned long dtls1_output_cert_chain(SSL *s, CERT_PKEY *cpk)
    997.   	{
    998.   	unsigned char *p;

ssl/d1_both.c:1002:7: Call
    1000.   	BUF_MEM *buf=s->init_buf;
    1001.   
    1002.   	if (!ssl_add_cert_chain(s, cpk, &l))
                  ^
    1003.   		return 0;
    1004.   

ssl/ssl_cert.c:1053:1: Parameter `s->init_buf->length`
      1051.   
      1052.   /* Add certificate chain to internal SSL BUF_MEM strcuture */
      1053. > int ssl_add_cert_chain(SSL *s, CERT_PKEY *cpk, unsigned long *l)
      1054.   	{
      1055.   	BUF_MEM *buf = s->init_buf;

ssl/ssl_cert.c:1087:7: Call
      1085.   
      1086.   	/* TLSv1 sends a chain with nothing in it, instead of an alert */
      1087.   	if (!BUF_MEM_grow_clean(buf,10))
                    ^
      1088.   		{
      1089.   		SSLerr(SSL_F_SSL_ADD_CERT_CHAIN,ERR_R_BUF_LIB);

crypto/buffer/buffer.c:139:1: <LHS trace>
137.   	}
138.   
139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
140.   	{
141.   	char *ret;

crypto/buffer/buffer.c:139:1: Parameter `len`
        137.   	}
        138.   
        139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
        140.   	{
        141.   	char *ret;

crypto/buffer/buffer.c:139:1: <RHS trace>
137.   	}
138.   
139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
140.   	{
141.   	char *ret;

crypto/buffer/buffer.c:139:1: Parameter `len`
        137.   	}
        138.   
        139. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
        140.   	{
        141.   	char *ret;

crypto/buffer/buffer.c:146:3: Binary operation: ([0, +oo] - 10):unsigned64 by call to `dtls1_send_server_certificate` 
        144.   	if (str->length >= len)
        145.   		{
        146.   		memset(&str->data[len],0,str->length-len);
                 ^
        147.   		str->length=len;
        148.   		return(len);
