ssl/t1_enc.c:1044: error: INTEGER_OVERFLOW_L2
  ([13, +oo] - [16, 64]):unsigned32 by call to `ssl3_cbc_digest_record`.
Showing all 8 steps of the trace


ssl/t1_enc.c:976:1: Parameter `ssl->s3->read_mac_secret_size`
974.   	}
975.   
976. > int tls1_mac(SSL *ssl, unsigned char *md, int send)
977.   	{
978.   	SSL3_RECORD *rec;

ssl/t1_enc.c:1044:3: Call
1042.   		 * timing-oracle. */
1043.   		 /* Final param == not SSLv3 */
1044.   		ssl3_cbc_digest_record(
          ^
1045.   			mac_ctx,
1046.   			md, &md_size,

ssl/s3_cbc.c:402:1: <LHS trace>
400.    * padding too. ) 
401.    */
402. > void ssl3_cbc_digest_record(
403.   	const EVP_MD_CTX *ctx,
404.   	unsigned char* md_out,

ssl/s3_cbc.c:402:1: Parameter `data_plus_mac_plus_padding_size`
  400.    * padding too. ) 
  401.    */
  402. > void ssl3_cbc_digest_record(
  403.   	const EVP_MD_CTX *ctx,
  404.   	unsigned char* md_out,

ssl/s3_cbc.c:533:2: Assignment
  531.   	 * bytes of `header' before the start of the data (TLS) or 71/75 bytes
  532.   	 * (SSLv3) */
  533.   	len = data_plus_mac_plus_padding_size + header_length;
          ^
  534.   	/* max_mac_bytes contains the maximum bytes of bytes in the MAC, including
  535.   	* |header|, assuming that there's no padding. */

ssl/s3_cbc.c:446:4: <RHS trace>
444.   			md_final_raw = tls1_md5_final_raw;
445.   			md_transform = (void(*)(void *ctx, const unsigned char *block)) MD5_Transform;
446.   			md_size = 16;
          ^
447.   			sslv3_pad_length = 48;
448.   			length_is_big_endian = 0;

ssl/s3_cbc.c:446:4: Assignment
  444.   			md_final_raw = tls1_md5_final_raw;
  445.   			md_transform = (void(*)(void *ctx, const unsigned char *block)) MD5_Transform;
  446.   			md_size = 16;
            ^
  447.   			sslv3_pad_length = 48;
  448.   			length_is_big_endian = 0;

ssl/s3_cbc.c:536:2: Binary operation: ([13, +oo] - [16, 64]):unsigned32 by call to `ssl3_cbc_digest_record` 
  534.   	/* max_mac_bytes contains the maximum bytes of bytes in the MAC, including
  535.   	* |header|, assuming that there's no padding. */
  536.   	max_mac_bytes = len - md_size - 1;
          ^
  537.   	/* num_blocks is the maximum number of hash blocks. */
  538.   	num_blocks = (max_mac_bytes + 1 + md_length_size + md_block_size - 1) / md_block_size;
