ssl/record/ssl3_record.c:1882: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 17728]):unsigned64 by call to `dtls1_process_record`.
Showing all 11 steps of the trace


ssl/record/ssl3_record.c:1770:13: Unknown value from: non-const function
1768.   
1769.           if (s->msg_callback)
1770.               s->msg_callback(0, 0, SSL3_RT_HEADER, p, DTLS1_RT_HEADER_LENGTH,
                    ^
1771.                               s, s->msg_callback_arg);
1772.   

ssl/record/ssl3_record.c:1785:9: Assignment
1783.           p += 6;
1784.   
1785.           n2s(p, rr->length);
                ^
1786.   
1787.           /* Lets check version */

ssl/record/ssl3_record.c:1882:10: Call
1880.       }
1881.   
1882.       if (!dtls1_process_record(s, bitmap)) {
                 ^
1883.           rr->length = 0;
1884.           RECORD_LAYER_reset_packet_length(&s->rlayer); /* dump this record */

ssl/record/ssl3_record.c:1496:1: Parameter `s->rlayer.rrec.length`
  1494.   }
  1495.   
  1496. > int dtls1_process_record(SSL *s, DTLS1_BITMAP *bitmap)
  1497.   {
  1498.       int i, al;

ssl/record/ssl3_record.c:1629:18: Call
  1627.                */
  1628.               mac = mac_tmp;
  1629.               if (!ssl3_cbc_copy_mac(mac_tmp, rr, mac_size)) {
                           ^
  1630.                   al = SSL_AD_INTERNAL_ERROR;
  1631.                   SSLerr(SSL_F_DTLS1_PROCESS_RECORD, ERR_R_INTERNAL_ERROR);

ssl/record/ssl3_record.c:1421:1: <LHS trace>
1419.   #define CBC_MAC_ROTATE_IN_PLACE
1420.   
1421. > int ssl3_cbc_copy_mac(unsigned char *out,
1422.                          const SSL3_RECORD *rec, size_t md_size)
1423.   {

ssl/record/ssl3_record.c:1421:1: Parameter `rec->length`
    1419.   #define CBC_MAC_ROTATE_IN_PLACE
    1420.   
    1421. > int ssl3_cbc_copy_mac(unsigned char *out,
    1422.                          const SSL3_RECORD *rec, size_t md_size)
    1423.   {

ssl/record/ssl3_record.c:1434:5: Assignment
    1432.        * mac_end is the index of |rec->data| just after the end of the MAC.
    1433.        */
    1434.       size_t mac_end = rec->length;
                ^
    1435.       size_t mac_start = mac_end - md_size;
    1436.       size_t in_mac;

ssl/record/ssl3_record.c:1421:1: <RHS trace>
1419.   #define CBC_MAC_ROTATE_IN_PLACE
1420.   
1421. > int ssl3_cbc_copy_mac(unsigned char *out,
1422.                          const SSL3_RECORD *rec, size_t md_size)
1423.   {

ssl/record/ssl3_record.c:1421:1: Parameter `md_size`
    1419.   #define CBC_MAC_ROTATE_IN_PLACE
    1420.   
    1421. > int ssl3_cbc_copy_mac(unsigned char *out,
    1422.                          const SSL3_RECORD *rec, size_t md_size)
    1423.   {

ssl/record/ssl3_record.c:1435:5: Binary operation: ([0, +oo] - [0, 17728]):unsigned64 by call to `dtls1_process_record` 
    1433.        */
    1434.       size_t mac_end = rec->length;
    1435.       size_t mac_start = mac_end - md_size;
                ^
    1436.       size_t in_mac;
    1437.       /*
