ssl/record/rec_layer_d1.c:250: error: INTEGER_OVERFLOW_L2
  ([0, 17728] - [0, 64]):unsigned32 by call to `dtls1_process_record`.
Showing all 10 steps of the trace


ssl/record/rec_layer_d1.c:237:1: Parameter `s->rlayer.rrec.length`
235.   
236.   
237. > int dtls1_process_buffered_records(SSL *s)
238.   {
239.       pitem *item;

ssl/record/rec_layer_d1.c:250:18: Call
248.           while (pqueue_peek(s->rlayer.d->unprocessed_rcds.q)) {
249.               dtls1_get_unprocessed_record(s);
250.               if (!dtls1_process_record(s))
                        ^
251.                   return (0);
252.               if (dtls1_buffer_record(s, &(s->rlayer.d->processed_rcds),

ssl/record/ssl3_record.c:1266:1: Parameter `s->rlayer.rrec.length`
  1264.   }
  1265.   
  1266. > int dtls1_process_record(SSL *s)
  1267.   {
  1268.       int i, al;

ssl/record/ssl3_record.c:1362:13: Call
  1360.                */
  1361.               mac = mac_tmp;
  1362.               ssl3_cbc_copy_mac(mac_tmp, rr, mac_size);
                      ^
  1363.               rr->length -= mac_size;
  1364.           } else {

ssl/record/ssl3_record.c:1189:1: <LHS trace>
1187.   #define CBC_MAC_ROTATE_IN_PLACE
1188.   
1189. > void ssl3_cbc_copy_mac(unsigned char *out,
1190.                          const SSL3_RECORD *rec, unsigned md_size)
1191.   {

ssl/record/ssl3_record.c:1189:1: Parameter `rec->length`
    1187.   #define CBC_MAC_ROTATE_IN_PLACE
    1188.   
    1189. > void ssl3_cbc_copy_mac(unsigned char *out,
    1190.                          const SSL3_RECORD *rec, unsigned md_size)
    1191.   {

ssl/record/ssl3_record.c:1202:5: Assignment
    1200.        * mac_end is the index of |rec->data| just after the end of the MAC.
    1201.        */
    1202.       unsigned mac_end = rec->length;
                ^
    1203.       unsigned mac_start = mac_end - md_size;
    1204.       /*

ssl/record/ssl3_record.c:1189:1: <RHS trace>
1187.   #define CBC_MAC_ROTATE_IN_PLACE
1188.   
1189. > void ssl3_cbc_copy_mac(unsigned char *out,
1190.                          const SSL3_RECORD *rec, unsigned md_size)
1191.   {

ssl/record/ssl3_record.c:1189:1: Parameter `md_size`
    1187.   #define CBC_MAC_ROTATE_IN_PLACE
    1188.   
    1189. > void ssl3_cbc_copy_mac(unsigned char *out,
    1190.                          const SSL3_RECORD *rec, unsigned md_size)
    1191.   {

ssl/record/ssl3_record.c:1203:5: Binary operation: ([0, 17728] - [0, 64]):unsigned32 by call to `dtls1_process_record` 
    1201.        */
    1202.       unsigned mac_end = rec->length;
    1203.       unsigned mac_start = mac_end - md_size;
                ^
    1204.       /*
    1205.        * scan_start contains the number of bytes that we can ignore because the
