ssl/s3_cbc.c:457: error: INTEGER_OVERFLOW_L2
  ([13, `data_plus_mac_plus_padding_size` + `mac_secret_length` + 58] - [14-min(1, `data_plus_mac_plus_padding_size`), `mac_secret_length` + 59]):unsigned32.
Showing all 5 steps of the trace


ssl/s3_cbc.c:177:1: <LHS trace>
175.    * Returns 1 on success or 0 on error
176.    */
177. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
178.                               unsigned char *md_out,
179.                               size_t *md_out_size,

ssl/s3_cbc.c:177:1: Parameter `data_plus_mac_plus_padding_size`
175.    * Returns 1 on success or 0 on error
176.    */
177. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
178.                               unsigned char *md_out,
179.                               size_t *md_out_size,

ssl/s3_cbc.c:177:1: <RHS trace>
175.    * Returns 1 on success or 0 on error
176.    */
177. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
178.                               unsigned char *md_out,
179.                               size_t *md_out_size,

ssl/s3_cbc.c:177:1: Parameter `data_plus_mac_plus_padding_size`
175.    * Returns 1 on success or 0 on error
176.    */
177. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
178.                               unsigned char *md_out,
179.                               size_t *md_out_size,

ssl/s3_cbc.c:457:21: Binary operation: ([13, data_plus_mac_plus_padding_size + mac_secret_length + 58] - [14-min(1, data_plus_mac_plus_padding_size), mac_secret_length + 59]):unsigned32
455.                   b = header[k];
456.               else if (k < data_plus_mac_plus_padding_size + header_length)
457.                   b = data[k - header_length];
                           ^
458.               k++;
459.   
