crypto/ct/ct_b64.c:149: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 4):unsigned64 by call to `o2i_SCT_signature`.
Showing all 10 steps of the trace


crypto/ct/ct_b64.c:144:14: Call
142.       dec = NULL;
143.   
144.       declen = ct_base64_decode(signature_base64, &dec);
                    ^
145.       if (declen < 0) {
146.           CTerr(CT_F_SCT_NEW_FROM_BASE64, X509_R_BASE64_DECODE_ERROR);

crypto/ct/ct_b64.c:81:9: Assignment
  79.       if (inlen == 0) {
  80.           *out = NULL;
  81.           return 0;
                ^
  82.       }
  83.   

crypto/ct/ct_b64.c:144:5: Assignment
142.       dec = NULL;
143.   
144.       declen = ct_base64_decode(signature_base64, &dec);
           ^
145.       if (declen < 0) {
146.           CTerr(CT_F_SCT_NEW_FROM_BASE64, X509_R_BASE64_DECODE_ERROR);

crypto/ct/ct_b64.c:149:9: Call
147.           goto err;
148.       }
149.       if (o2i_SCT_signature(sct, (const unsigned char **)&dec, declen) <= 0)
               ^
150.           goto err;
151.       OPENSSL_free(dec);

crypto/ct/ct_oct.c:73:1: <LHS trace>
71.   #include "ct_locl.h"
72.   
73. > int o2i_SCT_signature(SCT *sct, const unsigned char **in, size_t len)
74.   {
75.       size_t siglen;

crypto/ct/ct_oct.c:73:1: Parameter `len`
  71.   #include "ct_locl.h"
  72.   
  73. > int o2i_SCT_signature(SCT *sct, const unsigned char **in, size_t len)
  74.   {
  75.       size_t siglen;

crypto/ct/ct_oct.c:76:5: Assignment
  74.   {
  75.       size_t siglen;
  76.       size_t len_remaining = len;
            ^
  77.       const unsigned char *p;
  78.   

crypto/ct/ct_oct.c:73:1: <RHS trace>
71.   #include "ct_locl.h"
72.   
73. > int o2i_SCT_signature(SCT *sct, const unsigned char **in, size_t len)
74.   {
75.       size_t siglen;

crypto/ct/ct_oct.c:73:1: Parameter `**in`
  71.   #include "ct_locl.h"
  72.   
  73. > int o2i_SCT_signature(SCT *sct, const unsigned char **in, size_t len)
  74.   {
  75.       size_t siglen;

crypto/ct/ct_oct.c:105:5: Binary operation: ([0, +oo] - 4):unsigned64 by call to `o2i_SCT_signature` 
  103.       /* Retrieve signature and check it is consistent with the buffer length */
  104.       n2s(p, siglen);
  105.       len_remaining -= (p - *in);
             ^
  106.       if (siglen > len_remaining) {
  107.           CTerr(CT_F_O2I_SCT_SIGNATURE, CT_R_SCT_INVALID_SIGNATURE);
