ssl/s3_pkt.c:310: error: INTEGER_OVERFLOW_L2
  (18437 - [0, 4+max(34816, `s->s3->rrec.length`)]):unsigned32 by call to `ssl3_read_n`.
Showing all 5 steps of the trace


ssl/s3_pkt.c:228:1: Parameter `s->packet_length`
226.    * ssl->s3->rrec.length, - number of bytes
227.    */
228. > static int ssl3_get_record(SSL *s)
229.   	{
230.   	int ssl_major,ssl_minor,al;

ssl/s3_pkt.c:310:6: Call
308.   			{
309.   			i=rr->length;
310.   			n=ssl3_read_n(s,i,i,1);
            ^
311.   			if (n <= 0) return(n); /* error or non-blocking io */
312.   			}

ssl/s3_pkt.c:128:1: <RHS trace>
126.   static int do_change_cipher_spec(SSL *ssl);
127.   
128. > static int ssl3_read_n(SSL *s, int n, int max, int extend)
129.   	{
130.   	/* If extend == 0, obtain new n-byte packet; if extend == 1, increase

ssl/s3_pkt.c:128:1: Parameter `s->packet_length`
  126.   static int do_change_cipher_spec(SSL *ssl);
  127.   
  128. > static int ssl3_read_n(SSL *s, int n, int max, int extend)
  129.   	{
  130.   	/* If extend == 0, obtain new n-byte packet; if extend == 1, increase

ssl/s3_pkt.c:164:3: Binary operation: (18437 - [0, 4+max(34816, s->s3->rrec.length)]):unsigned32 by call to `ssl3_read_n` 
  162.   	{
  163.   		/* avoid buffer overflow */
  164.   		int max_max = SSL3_RT_MAX_PACKET_SIZE - s->packet_length;
           ^
  165.   		if (s->options & SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER)
  166.   			max_max += SSL3_RT_MAX_EXTRA;
