ssl/statem/statem.c:862: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `statem_do_write`.
Showing all 11 steps of the trace


ssl/statem/statem.c:754:1: Parameter `s->rlayer.numwpipes`
752.    * result in an NBIO event.
753.    */
754. > static SUB_STATE_RETURN write_state_machine(SSL *s)
755.   {
756.       OSSL_STATEM *st = &s->statem;

ssl/statem/statem.c:862:19: Call
860.                   dtls1_start_timer(s);
861.               }
862.               ret = statem_do_write(s);
                         ^
863.               if (ret <= 0) {
864.                   return SUB_STATE_ERROR;

ssl/statem/statem.c:698:1: Parameter `s->rlayer.numwpipes`
  696.    * Send a previously constructed message to the peer.
  697.    */
  698. > static int statem_do_write(SSL *s)
  699.   {
  700.       OSSL_STATEM *st = &s->statem;

ssl/statem/statem.c:707:20: Call
  705.               return dtls1_do_write(s, SSL3_RT_CHANGE_CIPHER_SPEC);
  706.           else
  707.               return ssl3_do_write(s, SSL3_RT_CHANGE_CIPHER_SPEC);
                            ^
  708.       } else {
  709.           return ssl_do_write(s);

ssl/statem/statem_lib.c:42:1: Parameter `s->rlayer.numwpipes`
    40.    * SSL3_RT_CHANGE_CIPHER_SPEC)
    41.    */
    42. > int ssl3_do_write(SSL *s, int type)
    43.   {
    44.       int ret;

ssl/statem/statem_lib.c:47:11: Call
    45.       size_t written = 0;
    46.   
    47.       ret = ssl3_write_bytes(s, type, &s->init_buf->data[s->init_off],
                    ^
    48.                              s->init_num, &written);
    49.       if (ret < 0)

ssl/record/rec_layer_s3.c:341:1: Parameter `s->rlayer.numwpipes`
      339.    * not all data has been sent or non-blocking IO.
      340.    */
      341. > int ssl3_write_bytes(SSL *s, int type, const void *buf_, size_t len,
      342.                        size_t *written)
      343.   {

ssl/record/rec_layer_s3.c:409:13: Call
      407.       if (wb->left != 0) {
      408.           /* SSLfatal() already called if appropriate */
      409.           i = ssl3_write_pending(s, type, &buf[tot], s->rlayer.wpend_tot,
                         ^
      410.                                  &tmpwrit);
      411.           if (i <= 0) {

ssl/record/rec_layer_s3.c:1162:1: <LHS trace>
1160.    * Return values are as per SSL_write()
1161.    */
1162. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
1163.                          size_t *written)
1164.   {

ssl/record/rec_layer_s3.c:1162:1: Parameter `s->rlayer.numwpipes`
        1160.    * Return values are as per SSL_write()
        1161.    */
        1162. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
        1163.                          size_t *written)
        1164.   {

ssl/record/rec_layer_s3.c:1182:16: Binary operation: ([0, +oo] - 1):unsigned64 by call to `statem_do_write` 
        1180.           /* Loop until we find a buffer we haven't written out yet */
        1181.           if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
        1182.               && currbuf < s->rlayer.numwpipes - 1) {
                               ^
        1183.               currbuf++;
        1184.               continue;
