ssl/statem/statem_srvr.c:1335: error: INTEGER_OVERFLOW_L2
  ([0, `pkt->remaining`] - [0, 32]):unsigned64 by call to `PACKET_copy_bytes`.
Showing all 11 steps of the trace


ssl/statem/statem_srvr.c:1320:17: Call
1318.   
1319.           if (!PACKET_get_net_2(pkt, &ciphersuite_len)
1320.               || !PACKET_get_net_2(pkt, &session_id_len)
                        ^
1321.               || !PACKET_get_net_2(pkt, &challenge_len)) {
1322.               SSLfatal(s, SSL_AD_DECODE_ERROR, SSL_F_TLS_PROCESS_CLIENT_HELLO,

ssl/packet_locl.h:155:10: Call
  153.   __owur static ossl_inline int PACKET_get_net_2(PACKET *pkt, unsigned int *data)
  154.   {
  155.       if (!PACKET_peek_net_2(pkt, data))
                  ^
  156.           return 0;
  157.   

ssl/packet_locl.h:139:8: Parameter `*data`
    137.    * |*data|
    138.    */
    139.   __owur static ossl_inline int PACKET_peek_net_2(const PACKET *pkt,
                  ^
    140.                                                   unsigned int *data)
    141.   {

ssl/statem/statem_srvr.c:1335:17: Call
1333.           if (!PACKET_get_sub_packet(pkt, &clienthello->ciphersuites,
1334.                                      ciphersuite_len)
1335.               || !PACKET_copy_bytes(pkt, clienthello->session_id, session_id_len)
                        ^
1336.               || !PACKET_get_sub_packet(pkt, &challenge, challenge_len)
1337.               /* No extensions. */

ssl/packet_locl.h:379:8: Parameter `len`
  377.    * The caller is responsible for ensuring that |data| can hold |len| bytes.
  378.    */
  379.   __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
                ^
  380.                                                   unsigned char *data, size_t len)
  381.   {

ssl/packet_locl.h:385:5: Call
  383.           return 0;
  384.   
  385.       packet_forward(pkt, len);
             ^
  386.   
  387.       return 1;

ssl/packet_locl.h:33:1: <LHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `pkt->remaining`
    31.   
    32.   /* Internal unchecked shorthand; don't use outside this file. */
    33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
    34.   {
    35.       pkt->curr += len;

ssl/packet_locl.h:33:1: <RHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `len`
    31.   
    32.   /* Internal unchecked shorthand; don't use outside this file. */
    33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
    34.   {
    35.       pkt->curr += len;

ssl/packet_locl.h:36:5: Binary operation: ([0, pkt->remaining] - [0, 32]):unsigned64 by call to `PACKET_copy_bytes` 
    34.   {
    35.       pkt->curr += len;
    36.       pkt->remaining -= len;
              ^
    37.   }
    38.   
