ssl/record/rec_layer_s3.c:872: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `ssl3_write_pending`.
Showing all 5 steps of the trace


ssl/record/rec_layer_s3.c:618:1: Parameter `numpipes`
616.   }
617.   
618. > int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
619.                     unsigned int *pipelens, unsigned int numpipes,
620.                     int create_empty_fragment)

ssl/record/rec_layer_s3.c:872:12: Call
870.   
871.       /* we now just need to write the buffer */
872.       return ssl3_write_pending(s, type, buf, totlen);
                  ^
873.    err:
874.       return -1;

ssl/record/rec_layer_s3.c:878:1: <LHS trace>
876.   
877.   /* if s->s3->wbuf.left != 0, we need to call this */
878. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
879.                          unsigned int len)
880.   {

ssl/record/rec_layer_s3.c:878:1: Parameter `s->rlayer.numwpipes`
  876.   
  877.   /* if s->s3->wbuf.left != 0, we need to call this */
  878. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
  879.                          unsigned int len)
  880.   {

ssl/record/rec_layer_s3.c:897:16: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ssl3_write_pending` 
  895.           /* Loop until we find a buffer we haven't written out yet */
  896.           if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
  897.               && currbuf < s->rlayer.numwpipes - 1) {
                        ^
  898.               currbuf++;
  899.               continue;
