ssl/s3_clnt.c:371: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 10):unsigned64 by call to `ssl3_send_client_certificate`.
Showing all 11 steps of the trace


ssl/s3_clnt.c:183:1: Parameter `s->init_buf->length`
181.   			ssl3_get_client_method)
182.   
183. > int ssl3_connect(SSL *s)
184.   	{
185.   	BUF_MEM *buf=NULL;

ssl/s3_clnt.c:371:8: Call
369.   		case SSL3_ST_CW_CERT_C:
370.   		case SSL3_ST_CW_CERT_D:
371.   			ret=ssl3_send_client_certificate(s);
              ^
372.   			if (ret <= 0) goto end;
373.   			s->state=SSL3_ST_CW_KEY_EXCH_A;

ssl/s3_clnt.c:2584:1: Parameter `s->init_buf->length`
  2582.   	}
  2583.   
  2584. > int ssl3_send_client_certificate(SSL *s)
  2585.   	{
  2586.   	X509 *x509=NULL;

ssl/s3_clnt.c:2652:5: Call
  2650.   		{
  2651.   		s->state=SSL3_ST_CW_CERT_D;
  2652.   		l=ssl3_output_cert_chain(s,
              ^
  2653.   			(s->s3->tmp.cert_req == 2)?NULL:s->cert->key->x509);
  2654.   		s->init_num=(int)l;

ssl/s3_both.c:265:1: Parameter `s->init_buf->length`
    263.   	}
    264.   
    265. > unsigned long ssl3_output_cert_chain(SSL *s, X509 *x)
    266.   	{
    267.   	unsigned char *p;

ssl/s3_both.c:283:7: Call
    281.   	/* TLSv1 sends a chain with nothing in it, instead of an alert */
    282.   	buf=s->init_buf;
    283.   	if (!BUF_MEM_grow_clean(buf,10))
                 ^
    284.   		{
    285.   		SSLerr(SSL_F_SSL3_OUTPUT_CERT_CHAIN,ERR_R_BUF_LIB);

crypto/buffer/buffer.c:128:1: <LHS trace>
126.   	}
127.   
128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
129.   	{
130.   	char *ret;

crypto/buffer/buffer.c:128:1: Parameter `len`
      126.   	}
      127.   
      128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
      129.   	{
      130.   	char *ret;

crypto/buffer/buffer.c:128:1: <RHS trace>
126.   	}
127.   
128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
129.   	{
130.   	char *ret;

crypto/buffer/buffer.c:128:1: Parameter `len`
      126.   	}
      127.   
      128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
      129.   	{
      130.   	char *ret;

crypto/buffer/buffer.c:135:3: Binary operation: ([0, +oo] - 10):unsigned64 by call to `ssl3_send_client_certificate` 
      133.   	if (str->length >= len)
      134.   		{
      135.   		memset(&str->data[len],0,str->length-len);
               ^
      136.   		str->length=len;
      137.   		return(len);
