ssl/record/ssl3_record.c:950: error: INTEGER_OVERFLOW_L2
  ([13, +oo] - [16, 64]):unsigned32 by call to `ssl3_cbc_digest_record`.
Showing all 8 steps of the trace


ssl/record/ssl3_record.c:888:1: Parameter `ssl->s3->read_mac_secret_size`
886.   }
887.   
888. > int tls1_mac(SSL *ssl, unsigned char *md, int send)
889.   {
890.       SSL3_RECORD *rec;

ssl/record/ssl3_record.c:950:13: Call
948.            */
949.           /* Final param == not SSLv3 */
950.           if (ssl3_cbc_digest_record(mac_ctx,
                   ^
951.                                      md, &md_size,
952.                                      header, rec->input,

ssl/s3_cbc.c:177:1: <LHS trace>
175.    * Returns 1 on success or 0 on error
176.    */
177. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
178.                               unsigned char *md_out,
179.                               size_t *md_out_size,

ssl/s3_cbc.c:177:1: Parameter `data_plus_mac_plus_padding_size`
  175.    * Returns 1 on success or 0 on error
  176.    */
  177. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
  178.                               unsigned char *md_out,
  179.                               size_t *md_out_size,

ssl/s3_cbc.c:317:5: Assignment
  315.        * (SSLv3)
  316.        */
  317.       len = data_plus_mac_plus_padding_size + header_length;
             ^
  318.       /*
  319.        * max_mac_bytes contains the maximum bytes of bytes in the MAC,

ssl/s3_cbc.c:226:9: <RHS trace>
224.           md_transform =
225.               (void (*)(void *ctx, const unsigned char *block))MD5_Transform;
226.           md_size = 16;
               ^
227.           sslv3_pad_length = 48;
228.           length_is_big_endian = 0;

ssl/s3_cbc.c:226:9: Assignment
  224.           md_transform =
  225.               (void (*)(void *ctx, const unsigned char *block))MD5_Transform;
  226.           md_size = 16;
                 ^
  227.           sslv3_pad_length = 48;
  228.           length_is_big_endian = 0;

ssl/s3_cbc.c:322:5: Binary operation: ([13, +oo] - [16, 64]):unsigned32 by call to `ssl3_cbc_digest_record` 
  320.        * including * |header|, assuming that there's no padding.
  321.        */
  322.       max_mac_bytes = len - md_size - 1;
             ^
  323.       /* num_blocks is the maximum number of hash blocks. */
  324.       num_blocks =
