ssl/s2_pkt.c:141: error: INTEGER_OVERFLOW_L2
  ([0, 32769] - [min(0, `s->s2->rbuf_left`), 4]):unsigned32 by call to `read_n`.
Showing all 7 steps of the trace


ssl/s2_pkt.c:99:1: Parameter `s->s2->rbuf_left`
97.    * This routine will return 0 to len bytes, decrypted etc if required.
98.    */
99. > int ssl2_read(SSL *s, char *buf, int len)
100.   	{
101.   	int n;

ssl/s2_pkt.c:141:6: Call
139.   		if (s->first_packet)
140.   			{
141.   			n=read_n(s,5,SSL2_MAX_RECORD_LENGTH_2_BYTE_HEADER+2,0);
            ^
142.   			if (n <= 0) return(n); /* error or non-blocking */
143.   			s->first_packet=0;

ssl/s2_pkt.c:249:1: <LHS trace>
247.   	}
248.   
249. > static int read_n(SSL *s, unsigned int n, unsigned int max,
250.   	     unsigned int extend)
251.   	{

ssl/s2_pkt.c:249:1: Parameter `max`
  247.   	}
  248.   
  249. > static int read_n(SSL *s, unsigned int n, unsigned int max,
  250.   	     unsigned int extend)
  251.   	{

ssl/s2_pkt.c:249:1: <RHS trace>
247.   	}
248.   
249. > static int read_n(SSL *s, unsigned int n, unsigned int max,
250.   	     unsigned int extend)
251.   	{

ssl/s2_pkt.c:249:1: Parameter `n`
  247.   	}
  248.   
  249. > static int read_n(SSL *s, unsigned int n, unsigned int max,
  250.   	     unsigned int extend)
  251.   	{

ssl/s2_pkt.c:310:6: Binary operation: ([0, 32769] - [min(0, s->s2->rbuf_left), 4]):unsigned32 by call to `read_n` 
  308.   			{
  309.   			s->rwstate=SSL_READING;
  310.   			i=BIO_read(s->rbio,(char *)&(s->s2->rbuf[off+newb]),
              ^
  311.   				max-newb);
  312.   			}
