crypto/pem/pvkfmt.c:832: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 8):unsigned32 by call to `do_PVK_body`.
Showing all 6 steps of the trace


crypto/pem/pvkfmt.c:817:7: Call
815.   	p = pvk_hdr;
816.   
817.   	if (!do_PVK_header(&p, 24, 0, &saltlen, &keylen))
             ^
818.   		return 0;
819.   	buflen = (int) keylen + saltlen;

crypto/pem/pvkfmt.c:657:1: Parameter `*pkeylen`
  655.   	}
  656.   
  657. > static int do_PVK_header(const unsigned char **in, unsigned int length,
  658.   		int skip_magic,
  659.   	       	unsigned int *psaltlen, unsigned int *pkeylen)

crypto/pem/pvkfmt.c:832:8: Call
830.   		goto err;
831.   		}
832.   	ret = do_PVK_body(&p, saltlen, keylen, cb, u);
              ^
833.   
834.   	err:

crypto/pem/pvkfmt.c:723:1: <LHS trace>
721.   	
722.   
723. > static EVP_PKEY *do_PVK_body(const unsigned char **in,
724.   		unsigned int saltlen, unsigned int keylen,
725.   		pem_password_cb *cb, void *u)

crypto/pem/pvkfmt.c:723:1: Parameter `keylen`
  721.   	
  722.   
  723. > static EVP_PKEY *do_PVK_body(const unsigned char **in,
  724.   		unsigned int saltlen, unsigned int keylen,
  725.   		pem_password_cb *cb, void *u)

crypto/pem/pvkfmt.c:760:3: Binary operation: ([0, +oo] - 8):unsigned32 by call to `do_PVK_body` 
  758.   		memcpy(enctmp, p, 8);
  759.   		p += 8;
  760.   		inlen = keylen - 8;
           ^
  761.   		q = enctmp + 8;
  762.   		if (!EVP_DecryptInit_ex(&cctx, EVP_rc4(), NULL, keybuf, NULL))
