crypto/cms/cms_pwri.c:195: error: INTEGER_OVERFLOW_L2
  (0 - [-oo, 32]):unsigned64 by call to `EVP_DecryptUpdate`.
Showing all 7 steps of the trace


crypto/cms/cms_pwri.c:195:10: Call
193.           return 0;
194.       /* setup IV by decrypting last two blocks */
195.       if (!EVP_DecryptUpdate(ctx, tmp + inlen - 2 * blocklen, &outl,
                ^
196.                              in + inlen - 2 * blocklen, blocklen * 2)
197.           /*

crypto/evp/evp_enc.c:413:1: Parameter `ctx->cipher->block_size`
  411.   }
  412.   
  413. > int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  414.                         const unsigned char *in, int inl)
  415.   {

crypto/evp/evp_enc.c:440:5: Assignment
  438.           return EVP_EncryptUpdate(ctx, out, outl, in, inl);
  439.   
  440.       b = ctx->cipher->block_size;
             ^
  441.       OPENSSL_assert(b <= sizeof ctx->final);
  442.   

crypto/evp/evp_enc.c:446:16: Call
  444.           /* see comment about PTRDIFF_T comparison above */
  445.           if (((PTRDIFF_T)out == (PTRDIFF_T)in)
  446.               || is_partially_overlapping(out, in, b))
                        ^
  447.               return 0;
  448.           memcpy(out, ctx->final, b);

crypto/evp/evp_enc.c:279:1: <RHS trace>
277.   #endif
278.   
279. > static int is_partially_overlapping(const void *ptr1, const void *ptr2,
280.                                       int len)
281.   {

crypto/evp/evp_enc.c:279:1: Parameter `len`
    277.   #endif
    278.   
    279. > static int is_partially_overlapping(const void *ptr1, const void *ptr2,
    280.                                       int len)
    281.   {

crypto/evp/evp_enc.c:289:49: Binary operation: (0 - [-oo, 32]):unsigned64 by call to `EVP_DecryptUpdate` 
    287.        */
    288.       int condition = (len > 0) & (diff != 0) & ((diff < (PTRDIFF_T)len) |
    289.                                                  (diff > (0 - (PTRDIFF_T)len)));
                                                           ^
    290.       assert(!condition);
    291.       return condition;
