ssl/record/ssl3_record.c:649: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [`*inrecs->data` + 1, `*inrecs->data` + 1]):unsigned64 by call to `ssl3_cbc_remove_padding`.
Showing all 11 steps of the trace


ssl/record/ssl3_record.c:578:1: Parameter `*inrecs->data`
576.    *       occurred.
577.    */
578. > int ssl3_enc(SSL *s, SSL3_RECORD *inrecs, size_t n_recs, int send)
579.   {
580.       SSL3_RECORD *rec;

ssl/record/ssl3_record.c:649:20: Call
647.           }
648.           if ((bs != 1) && !send)
649.               return ssl3_cbc_remove_padding(rec, bs, mac_size);
                          ^
650.       }
651.       return (1);

ssl/record/ssl3_record.c:1111:1: Parameter `block_size`
  1109.    *  -1: otherwise.
  1110.    */
  1111. > int ssl3_cbc_remove_padding(SSL3_RECORD *rec,
  1112.                               size_t block_size, size_t mac_size)
  1113.   {

ssl/record/ssl3_record.c:1127:13: Call
  1125.       good = constant_time_ge_s(rec->length, padding_length + overhead);
  1126.       /* SSLv3 requires that the padding is minimal. */
  1127.       good &= constant_time_ge_s(block_size, padding_length + 1);
                      ^
  1128.       rec->length -= good & (padding_length + 1);
  1129.       return constant_time_select_int_s(good, 1, -1);

include/internal/constant_time_locl.h:134:1: Parameter `a`
    132.   }
    133.   
    134. > static ossl_inline size_t constant_time_ge_s(size_t a, size_t b)
    135.   {
    136.       return ~constant_time_lt_s(a, b);

include/internal/constant_time_locl.h:136:13: Call
    134.   static ossl_inline size_t constant_time_ge_s(size_t a, size_t b)
    135.   {
    136.       return ~constant_time_lt_s(a, b);
                       ^
    137.   }
    138.   

include/internal/constant_time_locl.h:117:1: <LHS trace>
115.   }
116.   
117. > static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
118.   {
119.       return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));

include/internal/constant_time_locl.h:117:1: Parameter `a`
      115.   }
      116.   
      117. > static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
      118.   {
      119.       return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));

include/internal/constant_time_locl.h:117:1: <RHS trace>
115.   }
116.   
117. > static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
118.   {
119.       return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));

include/internal/constant_time_locl.h:117:1: Parameter `b`
      115.   }
      116.   
      117. > static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
      118.   {
      119.       return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));

include/internal/constant_time_locl.h:119:12: Binary operation: ([0, +oo] - [*inrecs->data + 1, *inrecs->data + 1]):unsigned64 by call to `ssl3_cbc_remove_padding` 
      117.   static ossl_inline size_t constant_time_lt_s(size_t a, size_t b)
      118.   {
      119.       return constant_time_msb_s(a ^ ((a ^ b) | ((a - b) ^ b)));
                        ^
      120.   }
      121.   
