ssl/statem/statem.c:515: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 2147483647]):unsigned64 by call to `tls_get_message_header`.
Showing all 9 steps of the trace


ssl/statem/statem.c:474:1: Parameter `s->init_buf->length`
472.    * will resume in the same state where we left off.
473.    */
474. > static SUB_STATE_RETURN read_state_machine(SSL *s)
475.   {
476.       OSSL_STATEM *st = &s->statem;

ssl/statem/statem.c:515:23: Call
513.                   ret = dtls_get_message(s, &mt, &len);
514.               } else {
515.                   ret = tls_get_message_header(s, &mt);
                             ^
516.               }
517.   

ssl/statem/statem_lib.c:340:1: Parameter `s->init_buf->length`
  338.   }
  339.   
  340. > int tls_get_message_header(SSL *s, int *mt)
  341.   {
  342.       /* s->init_num < SSL3_HM_HEADER_LENGTH */

ssl/statem/statem_lib.c:432:19: Call
  430.               goto f_err;
  431.           }
  432.           if (l && !BUF_MEM_grow_clean(s->init_buf,
                           ^
  433.                                        (int)l + SSL3_HM_HEADER_LENGTH)) {
  434.               SSLerr(SSL_F_TLS_GET_MESSAGE_HEADER, ERR_R_BUF_LIB);

crypto/buffer/buffer.c:109:1: <LHS trace>
107.   }
108.   
109. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
110.   {
111.       char *ret;

crypto/buffer/buffer.c:109:1: Parameter `len`
    107.   }
    108.   
    109. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
    110.   {
    111.       char *ret;

crypto/buffer/buffer.c:109:1: <RHS trace>
107.   }
108.   
109. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
110.   {
111.       char *ret;

crypto/buffer/buffer.c:109:1: Parameter `len`
    107.   }
    108.   
    109. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
    110.   {
    111.       char *ret;

crypto/buffer/buffer.c:116:13: Binary operation: ([0, +oo] - [0, 2147483647]):unsigned64 by call to `tls_get_message_header` 
    114.       if (str->length >= len) {
    115.           if (str->data != NULL)
    116.               memset(&str->data[len], 0, str->length - len);
                       ^
    117.           str->length = len;
    118.           return (len);
