crypto/evp/e_aes.c:1508: error: INTEGER_OVERFLOW_L2
  ([0, 3071] - [1, 3071]):unsigned64 by call to `CRYPTO_gcm128_encrypt_ctr32`.
Showing all 9 steps of the trace


crypto/evp/e_aes.c:1469:1: Parameter `len`
1467.    */
1468.   
1469. > static int aes_gcm_tls_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
1470.                                 const unsigned char *in, size_t len)
1471.   {

crypto/evp/e_aes.c:1492:5: Assignment
1490.       in += EVP_GCM_TLS_EXPLICIT_IV_LEN;
1491.       out += EVP_GCM_TLS_EXPLICIT_IV_LEN;
1492.       len -= EVP_GCM_TLS_EXPLICIT_IV_LEN + EVP_GCM_TLS_TAG_LEN;
            ^
1493.       if (ctx->encrypt) {
1494.           /* Encrypt payload */

crypto/evp/e_aes.c:1508:17: Call
1506.               }
1507.   # endif
1508.               if (CRYPTO_gcm128_encrypt_ctr32(&gctx->gcm,
                        ^
1509.                                               in + bulk,
1510.                                               out + bulk,

crypto/modes/gcm128.c:1405:1: <LHS trace>
1403.   }
1404.   
1405. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
1406.                                   const unsigned char *in, unsigned char *out,
1407.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1405:1: Parameter `len`
  1403.   }
  1404.   
  1405. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
  1406.                                   const unsigned char *in, unsigned char *out,
  1407.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1405:1: <RHS trace>
1403.   }
1404.   
1405. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
1406.                                   const unsigned char *in, unsigned char *out,
1407.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1405:1: Parameter `len`
  1403.   }
  1404.   
  1405. > int CRYPTO_gcm128_encrypt_ctr32(GCM128_CONTEXT *ctx,
  1406.                                   const unsigned char *in, unsigned char *out,
  1407.                                   size_t len, ctr128_f stream)

crypto/modes/gcm128.c:1479:10: Assignment
  1477.       }
  1478.   #endif
  1479.       if ((i = (len & (size_t)-16))) {
                   ^
  1480.           size_t j = i / 16;
  1481.   

crypto/modes/gcm128.c:1493:9: Binary operation: ([0, 3071] - [1, 3071]):unsigned64 by call to `CRYPTO_gcm128_encrypt_ctr32` 
  1491.               ctx->Yi.d[3] = ctr;
  1492.           in += i;
  1493.           len -= i;
                  ^
  1494.   #if defined(GHASH)
  1495.           GHASH(ctx, out, i);
