ssl/record/rec_layer_d1.c:280: error: INTEGER_OVERFLOW_L2
  ([0, 17728] - [256, 17984]):unsigned64 by call to `dtls1_process_record`.
Showing all 10 steps of the trace


ssl/record/rec_layer_d1.c:223:1: Parameter `s->rlayer.rrec.length`
221.                      &((s)->rlayer.d->unprocessed_rcds))
222.   
223. > int dtls1_process_buffered_records(SSL *s)
224.   {
225.       pitem *item;

ssl/record/rec_layer_d1.c:280:31: Call
278.               }
279.   
280.               if (!replayok || !dtls1_process_record(s, bitmap)) {
                                     ^
281.                   /* dump this record */
282.                   rr->length = 0;

ssl/record/ssl3_record.c:1496:1: Parameter `s->rlayer.rrec.length`
  1494.   }
  1495.   
  1496. > int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap)
  1497.   {
  1498.       int i, al;

ssl/record/ssl3_record.c:1536:5: Assignment
  1534.       /* decrypt in place in 'rr->input' */
  1535.       rr->data = rr->input;
  1536.       rr->orig_len = rr->length;
              ^
  1537.   
  1538.       if (SSL_READ_ETM(s) && s->read_hash) {

ssl/record/ssl3_record.c:1629:18: Call
  1627.                */
  1628.               mac = mac_tmp;
  1629.               if (!ssl3_cbc_copy_mac(mac_tmp, rr, mac_size)) {
                           ^
  1630.                   al = SSL_AD_INTERNAL_ERROR;
  1631.                   SSLerr(SSL_F_DTLS1_PROCESS_RECORD, ERR_R_INTERNAL_ERROR);

ssl/record/ssl3_record.c:1421:1: <LHS trace>
1419.   #define CBC_MAC_ROTATE_IN_PLACE
1420.   
1421. > int ssl3_cbc_copy_mac(unsigned char *out,
1422.                          const SSL3_RECORD *rec, size_t md_size)
1423.   {

ssl/record/ssl3_record.c:1421:1: Parameter `md_size`
    1419.   #define CBC_MAC_ROTATE_IN_PLACE
    1420.   
    1421. > int ssl3_cbc_copy_mac(unsigned char *out,
    1422.                          const SSL3_RECORD *rec, size_t md_size)
    1423.   {

ssl/record/ssl3_record.c:1421:1: <RHS trace>
1419.   #define CBC_MAC_ROTATE_IN_PLACE
1420.   
1421. > int ssl3_cbc_copy_mac(unsigned char *out,
1422.                          const SSL3_RECORD *rec, size_t md_size)
1423.   {

ssl/record/ssl3_record.c:1421:1: Parameter `md_size`
    1419.   #define CBC_MAC_ROTATE_IN_PLACE
    1420.   
    1421. > int ssl3_cbc_copy_mac(unsigned char *out,
    1422.                          const SSL3_RECORD *rec, size_t md_size)
    1423.   {

ssl/record/ssl3_record.c:1455:9: Binary operation: ([0, 17728] - [256, 17984]):unsigned64 by call to `dtls1_process_record` 
    1453.       /* This information is public so it's safe to branch based on it. */
    1454.       if (rec->orig_len > md_size + 255 + 1)
    1455.           scan_start = rec->orig_len - (md_size + 255 + 1);
                    ^
    1456.   
    1457.       in_mac = 0;
