ssl/record/ssl3_record.c:1881: error: INTEGER_OVERFLOW_L2
  ([0, 17728] - [256, 320]):unsigned64 by call to `dtls1_process_record`.
Showing all 11 steps of the trace


ssl/record/ssl3_record.c:1769:13: Unknown value from: non-const function
1767.   
1768.           if (s->msg_callback)
1769.               s->msg_callback(0, 0, SSL3_RT_HEADER, p, DTLS1_RT_HEADER_LENGTH,
                    ^
1770.                               s, s->msg_callback_arg);
1771.   

ssl/record/ssl3_record.c:1784:9: Assignment
1782.           p += 6;
1783.   
1784.           n2s(p, rr->length);
                ^
1785.   
1786.           /* Lets check version */

ssl/record/ssl3_record.c:1881:10: Call
1879.       }
1880.   
1881.       if (!dtls1_process_record(s, bitmap)) {
                 ^
1882.           rr->length = 0;
1883.           RECORD_LAYER_reset_packet_length(&s->rlayer); /* dump this record */

ssl/record/ssl3_record.c:1495:1: Parameter `s->rlayer.rrec.length`
  1493.   }
  1494.   
  1495. > int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap)
  1496.   {
  1497.       int i, al;

ssl/record/ssl3_record.c:1535:5: Assignment
  1533.       /* decrypt in place in 'rr->input' */
  1534.       rr->data = rr->input;
  1535.       rr->orig_len = rr->length;
              ^
  1536.   
  1537.       if (SSL_READ_ETM(s) && s->read_hash) {

ssl/record/ssl3_record.c:1628:18: Call
  1626.                */
  1627.               mac = mac_tmp;
  1628.               if (!ssl3_cbc_copy_mac(mac_tmp, rr, mac_size)) {
                           ^
  1629.                   al = SSL_AD_INTERNAL_ERROR;
  1630.                   SSLerr(SSL_F_DTLS1_PROCESS_RECORD, ERR_R_INTERNAL_ERROR);

ssl/record/ssl3_record.c:1420:1: <LHS trace>
1418.   #define CBC_MAC_ROTATE_IN_PLACE
1419.   
1420. > int ssl3_cbc_copy_mac(unsigned char *out,
1421.                          const SSL3_RECORD *rec, size_t md_size)
1422.   {

ssl/record/ssl3_record.c:1420:1: Parameter `md_size`
    1418.   #define CBC_MAC_ROTATE_IN_PLACE
    1419.   
    1420. > int ssl3_cbc_copy_mac(unsigned char *out,
    1421.                          const SSL3_RECORD *rec, size_t md_size)
    1422.   {

ssl/record/ssl3_record.c:1420:1: <RHS trace>
1418.   #define CBC_MAC_ROTATE_IN_PLACE
1419.   
1420. > int ssl3_cbc_copy_mac(unsigned char *out,
1421.                          const SSL3_RECORD *rec, size_t md_size)
1422.   {

ssl/record/ssl3_record.c:1420:1: Parameter `md_size`
    1418.   #define CBC_MAC_ROTATE_IN_PLACE
    1419.   
    1420. > int ssl3_cbc_copy_mac(unsigned char *out,
    1421.                          const SSL3_RECORD *rec, size_t md_size)
    1422.   {

ssl/record/ssl3_record.c:1454:9: Binary operation: ([0, 17728] - [256, 320]):unsigned64 by call to `dtls1_process_record` 
    1452.       /* This information is public so it's safe to branch based on it. */
    1453.       if (rec->orig_len > md_size + 255 + 1)
    1454.           scan_start = rec->orig_len - (md_size + 255 + 1);
                    ^
    1455.   
    1456.       in_mac = 0;
