apps/ts.c:564: error: INTEGER_OVERFLOW_L2
  ([1, max(18446744073709551615, `md->md_size`)] + 1):unsigned64 by call to `TS_MSG_IMPRINT_set_msg`.
Showing all 12 steps of the trace


apps/ts.c:530:1: Parameter `md->md_size`
528.   	}
529.   
530. > static TS_REQ *create_query(BIO *data_bio, char *digest, const EVP_MD *md,
531.   			    const char *policy, int no_nonce, int cert)
532.   	{

apps/ts.c:562:13: Call
560.   
561.   	/* Adding message digest. */
562.   	if ((len = create_digest(data_bio, digest, md, &data)) == 0)
                   ^
563.   		goto err;
564.   	if (!TS_MSG_IMPRINT_set_msg(msg_imprint, data, len)) goto err;

apps/ts.c:635:2: Assignment
  633.   	return md_value_len;
  634.    err:
  635.   	return 0;
          ^
  636.   	}
  637.   

apps/ts.c:562:7: Assignment
560.   
561.   	/* Adding message digest. */
562.   	if ((len = create_digest(data_bio, digest, md, &data)) == 0)
             ^
563.   		goto err;
564.   	if (!TS_MSG_IMPRINT_set_msg(msg_imprint, data, len)) goto err;

apps/ts.c:564:7: Call
562.   	if ((len = create_digest(data_bio, digest, md, &data)) == 0)
563.   		goto err;
564.   	if (!TS_MSG_IMPRINT_set_msg(msg_imprint, data, len)) goto err;
             ^
565.   
566.   	if (!TS_REQ_set_msg_imprint(ts_req, msg_imprint)) goto err;

crypto/ts/ts_req_utils.c:119:1: Parameter `len`
  117.   	}
  118.   
  119. > int TS_MSG_IMPRINT_set_msg(TS_MSG_IMPRINT *a, unsigned char *d, int len)
  120.   	{
  121.   	return ASN1_OCTET_STRING_set(a->hashed_msg, d, len);

crypto/ts/ts_req_utils.c:121:9: Call
  119.   int TS_MSG_IMPRINT_set_msg(TS_MSG_IMPRINT *a, unsigned char *d, int len)
  120.   	{
  121.   	return ASN1_OCTET_STRING_set(a->hashed_msg, d, len);
                 ^
  122.   	}
  123.   

crypto/asn1/a_octet.c:70:1: Parameter `len`
    68.   	{ return M_ASN1_OCTET_STRING_cmp(a, b); }
    69.   
    70. > int ASN1_OCTET_STRING_set(ASN1_OCTET_STRING *x, const unsigned char *d,
    71.   			  size_t len)
    72.   	{ return M_ASN1_OCTET_STRING_set(x, d, len); }

crypto/asn1/a_octet.c:72:11: Call
    70.   int ASN1_OCTET_STRING_set(ASN1_OCTET_STRING *x, const unsigned char *d,
    71.   			  size_t len)
    72.   	{ return M_ASN1_OCTET_STRING_set(x, d, len); }
                    ^
    73.   

crypto/asn1/asn1_lib.c:374:1: <LHS trace>
372.   	}
373.   
374. > int ASN1_STRING_set(ASN1_STRING *str, const void *_data, size_t len)
375.   	{
376.   	unsigned char *c;

crypto/asn1/asn1_lib.c:374:1: Parameter `len`
      372.   	}
      373.   
      374. > int ASN1_STRING_set(ASN1_STRING *str, const void *_data, size_t len)
      375.   	{
      376.   	unsigned char *c;

crypto/asn1/asn1_lib.c:390:14: Binary operation: ([1, max(18446744073709551615, md->md_size)] + 1):unsigned64 by call to `TS_MSG_IMPRINT_set_msg` 
      388.   		c=str->data;
      389.   		if (c == NULL)
      390.   			str->data=OPENSSL_malloc(len+1);
                          ^
      391.   		else
      392.   			str->data=OPENSSL_realloc(c,len+1);
