crypto/evp/e_aes.c:964: error: INTEGER_OVERFLOW_L2
  ([0, 3071] - [1, 3071]):unsigned64 by call to `CRYPTO_gcm128_encrypt_ctr32`.
Showing all 9 steps of the trace


crypto/evp/e_aes.c:937:1: Parameter `len`
935.    */
936.   
937. > static int aes_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
938.   		const unsigned char *in, size_t len)
939.   	{

crypto/evp/e_aes.c:958:2: Assignment
956.   	in += EVP_GCM_TLS_EXPLICIT_IV_LEN;
957.   	out += EVP_GCM_TLS_EXPLICIT_IV_LEN;
958.   	len -= EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
        ^
959.   	if (ctx->encrypt)
960.   		{

crypto/evp/e_aes.c:964:8: Call
962.   		if (gctx->ctr)
963.   			{
964.   			if (CRYPTO_gcm128_encrypt_ctr32(&gctx->gcm,
              ^
965.   							in, out, len,
966.   							gctx->ctr))

crypto/modes/gcm128.c:1185:1: <LHS trace>
1183.   }
1184.   
1185. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
1186.   		const unsigned char *in, unsigned char *out,
1187.   		size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1185:1: Parameter `len`
  1183.   }
  1184.   
  1185. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
  1186.   		const unsigned char *in, unsigned char *out,
  1187.   		size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1185:1: <RHS trace>
1183.   }
1184.   
1185. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
1186.   		const unsigned char *in, unsigned char *out,
1187.   		size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1185:1: Parameter `len`
  1183.   }
  1184.   
  1185. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
  1186.   		const unsigned char *in, unsigned char *out,
  1187.   		size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1245:7: Assignment
  1243.   	}
  1244.   #endif
  1245.   	if ((i = (len&(size_t)-16))) {
                ^
  1246.   		size_t j=i/16;
  1247.   

crypto/modes/gcm128.c:1255:3: Binary operation: ([0, 3071] - [1, 3071]):unsigned64 by call to `CRYPTO_gcm128_encrypt_ctr32` 
  1253.   			ctx->Yi.d[3] = ctr;
  1254.   		in  += i;
  1255.   		len -= i;
            ^
  1256.   #if defined(GHASH)
  1257.   		GHASH(ctx,out,i);
