crypto/asn1/a_d2i_fp.c:119: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 16]):unsigned64 by call to `BUF_MEM_grow_clean`.
Showing all 7 steps of the trace


crypto/asn1/a_d2i_fp.c:99:5: Assignment
97.       unsigned char *p;
98.       int i;
99.       size_t want = HEADER_SIZE;
           ^
100.       uint32_t eos = 0;
101.       size_t off = 0;

crypto/asn1/a_d2i_fp.c:119:38: Call
117.               want -= (len - off);
118.   
119.               if (len + want < len || !BUF_MEM_grow_clean(b, len + want)) {
                                            ^
120.                   ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ERR_R_MALLOC_FAILURE);
121.                   goto err;

crypto/buffer/buffer.c:110:1: <LHS trace>
108.   }
109.   
110. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
111.   {
112.       char *ret;

crypto/buffer/buffer.c:110:1: Parameter `len`
  108.   }
  109.   
  110. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
  111.   {
  112.       char *ret;

crypto/buffer/buffer.c:110:1: <RHS trace>
108.   }
109.   
110. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
111.   {
112.       char *ret;

crypto/buffer/buffer.c:110:1: Parameter `len`
  108.   }
  109.   
  110. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
  111.   {
  112.       char *ret;

crypto/buffer/buffer.c:117:13: Binary operation: ([0, +oo] - [0, 16]):unsigned64 by call to `BUF_MEM_grow_clean` 
  115.       if (str->length >= len) {
  116.           if (str->data != NULL)
  117.               memset(&str->data[len], 0, str->length - len);
                     ^
  118.           str->length = len;
  119.           return len;
