crypto/rand/drbg_rand.c:183: error: INTEGER_OVERFLOW_L2
  (16 - [1, 68]):unsigned64 by call to `ctr_BCC_final`.
Showing all 13 steps of the trace


crypto/rand/drbg_rand.c:178:5: Assignment
176.       *p++ = 0;
177.       *p = (unsigned char)((ctr->keylen + 16) & 0xff);
178.       ctr->bltmp_pos = 8;
           ^
179.       ctr_BCC_update(ctr, in1, in1len);
180.       ctr_BCC_update(ctr, in2, in2len);

crypto/rand/drbg_rand.c:179:5: Call
177.       *p = (unsigned char)((ctr->keylen + 16) & 0xff);
178.       ctr->bltmp_pos = 8;
179.       ctr_BCC_update(ctr, in1, in1len);
           ^
180.       ctr_BCC_update(ctr, in2, in2len);
181.       ctr_BCC_update(ctr, in3, in3len);

crypto/rand/drbg_rand.c:110:1: Parameter `ctr->bltmp_pos`
  108.    * Process several blocks into BCC algorithm, some possibly partial
  109.    */
  110. > static void ctr_BCC_update(RAND_DRBG_CTR *ctr,
  111.                              const unsigned char *in, size_t inlen)
  112.   {

crypto/rand/drbg_rand.c:180:5: Call
178.       ctr->bltmp_pos = 8;
179.       ctr_BCC_update(ctr, in1, in1len);
180.       ctr_BCC_update(ctr, in2, in2len);
           ^
181.       ctr_BCC_update(ctr, in3, in3len);
182.       ctr_BCC_update(ctr, &c80, 1);

crypto/rand/drbg_rand.c:110:1: Parameter `ctr->bltmp_pos`
  108.    * Process several blocks into BCC algorithm, some possibly partial
  109.    */
  110. > static void ctr_BCC_update(RAND_DRBG_CTR *ctr,
  111.                              const unsigned char *in, size_t inlen)
  112.   {

crypto/rand/drbg_rand.c:181:5: Call
179.       ctr_BCC_update(ctr, in1, in1len);
180.       ctr_BCC_update(ctr, in2, in2len);
181.       ctr_BCC_update(ctr, in3, in3len);
           ^
182.       ctr_BCC_update(ctr, &c80, 1);
183.       ctr_BCC_final(ctr);

crypto/rand/drbg_rand.c:110:1: Parameter `ctr->bltmp_pos`
  108.    * Process several blocks into BCC algorithm, some possibly partial
  109.    */
  110. > static void ctr_BCC_update(RAND_DRBG_CTR *ctr,
  111.                              const unsigned char *in, size_t inlen)
  112.   {

crypto/rand/drbg_rand.c:182:5: Call
180.       ctr_BCC_update(ctr, in2, in2len);
181.       ctr_BCC_update(ctr, in3, in3len);
182.       ctr_BCC_update(ctr, &c80, 1);
           ^
183.       ctr_BCC_final(ctr);
184.       /* Set up key K */

crypto/rand/drbg_rand.c:110:1: Parameter `ctr->bltmp_pos`
  108.    * Process several blocks into BCC algorithm, some possibly partial
  109.    */
  110. > static void ctr_BCC_update(RAND_DRBG_CTR *ctr,
  111.                              const unsigned char *in, size_t inlen)
  112.   {

crypto/rand/drbg_rand.c:183:5: Call
181.       ctr_BCC_update(ctr, in3, in3len);
182.       ctr_BCC_update(ctr, &c80, 1);
183.       ctr_BCC_final(ctr);
           ^
184.       /* Set up key K */
185.       AES_set_encrypt_key(ctr->KX, ctr->keylen * 8, &ctr->df_kxks);

crypto/rand/drbg_rand.c:142:1: <RHS trace>
140.   }
141.   
142. > static void ctr_BCC_final(RAND_DRBG_CTR *ctr)
143.   {
144.       if (ctr->bltmp_pos) {

crypto/rand/drbg_rand.c:142:1: Parameter `ctr->bltmp_pos`
  140.   }
  141.   
  142. > static void ctr_BCC_final(RAND_DRBG_CTR *ctr)
  143.   {
  144.       if (ctr->bltmp_pos) {

crypto/rand/drbg_rand.c:145:9: Binary operation: (16 - [1, 68]):unsigned64 by call to `ctr_BCC_final` 
  143.   {
  144.       if (ctr->bltmp_pos) {
  145.           memset(ctr->bltmp + ctr->bltmp_pos, 0, 16 - ctr->bltmp_pos);
                 ^
  146.           ctr_BCC_blocks(ctr, ctr->bltmp);
  147.       }
