ssl/record/rec_layer_s3.c:707: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `do_ssl3_write`.
Showing all 9 steps of the trace


ssl/record/rec_layer_s3.c:449:1: Parameter `s->rlayer.numwpipes`
447.    * not all data has been sent or non-blocking IO.
448.    */
449. > int ssl3_write_bytes(SSL *s, int type, const void *buf_, int len)
450.   {
451.       const unsigned char *buf = buf_;

ssl/record/rec_layer_s3.c:707:13: Call
705.           }
706.   
707.           i = do_ssl3_write(s, type, &(buf[tot]), pipelens, numpipes, 0);
                   ^
708.           if (i <= 0) {
709.               /* XXX should we ssl3_release_write_buffer if i<0? */

ssl/record/rec_layer_s3.c:735:1: Parameter `s->rlayer.numwpipes`
  733.   }
  734.   
  735. > int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
  736.                     unsigned int *pipelens, unsigned int numpipes,
  737.                     int create_empty_fragment)

ssl/record/rec_layer_s3.c:756:9: Call
  754.        * will happen with non blocking IO
  755.        */
  756.       if (RECORD_LAYER_write_pending(&s->rlayer))
                 ^
  757.           return (ssl3_write_pending(s, type, buf, totlen));
  758.   

ssl/record/rec_layer_s3.c:191:1: Parameter `rl->numwpipes`
    189.   }
    190.   
    191. > int RECORD_LAYER_write_pending(const RECORD_LAYER *rl)
    192.   {
    193.       return (rl->numwpipes > 0)

ssl/record/rec_layer_s3.c:757:17: Call
  755.        */
  756.       if (RECORD_LAYER_write_pending(&s->rlayer))
  757.           return (ssl3_write_pending(s, type, buf, totlen));
                         ^
  758.   
  759.       /* If we have an alert to send, lets send it */

ssl/record/rec_layer_s3.c:999:1: <LHS trace>
997.   
998.   /* if s->s3->wbuf.left != 0, we need to call this */
999. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
1000.                          unsigned int len)
1001.   {

ssl/record/rec_layer_s3.c:999:1: Parameter `s->rlayer.numwpipes`
    997.   
    998.   /* if s->s3->wbuf.left != 0, we need to call this */
    999. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
    1000.                          unsigned int len)
    1001.   {

ssl/record/rec_layer_s3.c:1018:20: Binary operation: ([0, +oo] - 1):unsigned32 by call to `do_ssl3_write` 
    1016.           /* Loop until we find a buffer we haven't written out yet */
    1017.           if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
    1018.                   && currbuf < s->rlayer.numwpipes - 1) {
                               ^
    1019.               currbuf++;
    1020.               continue;
