ssl/s3_srvr.c:342: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `ssl3_send_server_certificate`.
Showing all 13 steps of the trace


ssl/s3_srvr.c:187:1: Parameter `s->cert->rsa_tmp->n->top`
185.   			ssl3_get_server_method)
186.   
187. > int ssl3_accept(SSL *s)
188.   	{
189.   	BUF_MEM *buf;

ssl/s3_srvr.c:342:9: Call
340.   				&& !(s->s3->tmp.new_cipher->algorithm_auth & SSL_aKRB5))
341.   				{
342.   				ret=ssl3_send_server_certificate(s);
               ^
343.   				if (ret <= 0) goto end;
344.   #ifndef OPENSSL_NO_TLSEXT

ssl/s3_srvr.c:2822:1: Parameter `s->cert->rsa_tmp->n->top`
  2820.   	}
  2821.   
  2822. > int ssl3_send_server_certificate(SSL *s)
  2823.   	{
  2824.   	unsigned long l;

ssl/s3_srvr.c:2829:5: Call
  2827.   	if (s->state == SSL3_ST_SW_CERT_A)
  2828.   		{
  2829.   		x=ssl_get_server_send_cert(s);
              ^
  2830.   		if (x == NULL)
  2831.   			{

ssl/ssl_lib.c:2038:1: Parameter `s->cert->rsa_tmp->n->top`
    2036.   
    2037.   /* THIS NEEDS CLEANING UP */
    2038. > X509 *ssl_get_server_send_cert(SSL *s)
    2039.   	{
    2040.   	unsigned long alg_k,alg_a,mask_k,mask_a;

ssl/ssl_lib.c:2045:2: Call
    2043.   
    2044.   	c=s->cert;
    2045.   	ssl_set_cert_masks(c, s->s3->tmp.new_cipher);
             ^
    2046.   	is_export=SSL_C_IS_EXPORT(s->s3->tmp.new_cipher);
    2047.   	if (is_export)

ssl/ssl_lib.c:1754:1: Parameter `c->rsa_tmp->n->top`
      1752.   	}
      1753.   
      1754. > void ssl_set_cert_masks(CERT *c, const SSL_CIPHER *cipher)
      1755.   	{
      1756.   	CERT_PKEY *cpk;

ssl/ssl_lib.c:1776:15: Call
      1774.   	rsa_tmp=(c->rsa_tmp != NULL || c->rsa_tmp_cb != NULL);
      1775.   	rsa_tmp_export=(c->rsa_tmp_cb != NULL ||
      1776.   		(rsa_tmp && RSA_size(c->rsa_tmp)*8 <= kl));
                            ^
      1777.   #else
      1778.   	rsa_tmp=rsa_tmp_export=0;

crypto/rsa/rsa_lib.c:274:1: Parameter `r->n->top`
        272.   	}
        273.   
        274. > int RSA_size(const RSA *r)
        275.   	{
        276.   	return(BN_num_bytes(r->n));

crypto/rsa/rsa_lib.c:276:9: Call
        274.   int RSA_size(const RSA *r)
        275.   	{
        276.   	return(BN_num_bytes(r->n));
                       ^
        277.   	}
        278.   

crypto/bn/bn_lib.c:248:1: <LHS trace>
246.   	}
247.   
248. > int BN_num_bits(const BIGNUM *a)
249.   	{
250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:248:1: Parameter `a->top`
          246.   	}
          247.   
          248. > int BN_num_bits(const BIGNUM *a)
          249.   	{
          250.   	int i = a->top - 1;

crypto/bn/bn_lib.c:250:2: Binary operation: ([0, +oo] - 1):unsigned64 by call to `ssl3_send_server_certificate` 
          248.   int BN_num_bits(const BIGNUM *a)
          249.   	{
          250.   	int i = a->top - 1;
                  ^
          251.   	bn_check_top(a);
          252.   
