crypto/evp/e_aes.c:1573: error: INTEGER_OVERFLOW_L2
  ([0, 3071] - [1, 3071]):unsigned64 by call to `CRYPTO_gcm128_encrypt_ctr32`.
Showing all 9 steps of the trace


crypto/evp/e_aes.c:1533:1: Parameter `len`
1531.    */
1532.   
1533. > static int aes_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
1534.                                 const unsigned char *in, size_t len)
1535.   {

crypto/evp/e_aes.c:1557:5: Assignment
1555.       in += EVP_GCM_TLS_EXPLICIT_IV_LEN;
1556.       out += EVP_GCM_TLS_EXPLICIT_IV_LEN;
1557.       len -= EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
            ^
1558.       if (EVP_CIPHER_CTX_encrypting(ctx)) {
1559.           /* Encrypt payload */

crypto/evp/e_aes.c:1573:17: Call
1571.               }
1572.   # endif
1573.               if (CRYPTO_gcm128_encrypt_ctr32(&gctx->gcm,
                        ^
1574.                                               in + bulk,
1575.                                               out + bulk,

crypto/modes/gcm128.c:1394:1: <LHS trace>
1392.   }
1393.   
1394. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
1395.                                   const unsigned char *in, unsigned char *out,
1396.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1394:1: Parameter `len`
  1392.   }
  1393.   
  1394. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
  1395.                                   const unsigned char *in, unsigned char *out,
  1396.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1394:1: <RHS trace>
1392.   }
1393.   
1394. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
1395.                                   const unsigned char *in, unsigned char *out,
1396.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1394:1: Parameter `len`
  1392.   }
  1393.   
  1394. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
  1395.                                   const unsigned char *in, unsigned char *out,
  1396.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1469:10: Assignment
  1467.       }
  1468.   # endif
  1469.       if ((i = (len & (size_t)-16))) {
                   ^
  1470.           size_t j = i / 16;
  1471.   

crypto/modes/gcm128.c:1483:9: Binary operation: ([0, 3071] - [1, 3071]):unsigned64 by call to `CRYPTO_gcm128_encrypt_ctr32` 
  1481.               ctx->Yi.d[3] = ctr;
  1482.           in += i;
  1483.           len -= i;
                  ^
  1484.   # if defined(GHASH)
  1485.           GHASH(ctx, out, i);
