ssl/d1_pkt.c:679: error: INTEGER_OVERFLOW_L2
  ([0, 17727] - [0, 17728]):unsigned32 by call to `dtls1_process_record`.
Showing all 15 steps of the trace


ssl/d1_pkt.c:554:13: Assignment
552.           /* this packet contained a partial record, dump it */
553.           if (s->packet_length != DTLS1_RT_HEADER_LENGTH) {
554.               s->packet_length = 0;
                   ^
555.               goto again;
556.           }

ssl/d1_pkt.c:679:10: Call
677.       }
678.   
679.       if (!dtls1_process_record(s)) {
                ^
680.           rr->length = 0;
681.           s->packet_length = 0;   /* dump this record */

ssl/d1_pkt.c:345:1: Parameter `s->s3->rrec.length`
  343.   }
  344.   
  345. > static int dtls1_process_record(SSL *s)
  346.   {
  347.       int i, al;

ssl/d1_pkt.c:441:13: Call
  439.                */
  440.               mac = mac_tmp;
  441.               ssl3_cbc_copy_mac(mac_tmp, rr, mac_size);
                     ^
  442.               rr->length -= mac_size;
  443.           } else {

ssl/s3_cbc.c:220:1: Parameter `md_size`
    218.   #define CBC_MAC_ROTATE_IN_PLACE
    219.   
    220. > void ssl3_cbc_copy_mac(unsigned char *out,
    221.                          const SSL3_RECORD *rec, unsigned md_size)
    222.   {

ssl/s3_cbc.c:269:35: Call
    267.       for (i = scan_start, j = 0; i < rec->orig_len; i++) {
    268.           unsigned char mac_started = constant_time_ge_8(i, mac_start);
    269.           unsigned char mac_ended = constant_time_ge_8(i, mac_end);
                                             ^
    270.           unsigned char b = rec->data[i];
    271.           rotated_mac[j++] |= b & mac_started & ~mac_ended;

crypto/constant_time_locl.h:153:1: Parameter `a`
      151.   }
      152.   
      153. > static inline unsigned char constant_time_ge_8(unsigned int a, unsigned int b)
      154.   {
      155.       return (unsigned char)(constant_time_ge(a, b));

crypto/constant_time_locl.h:155:28: Call
      153.   static inline unsigned char constant_time_ge_8(unsigned int a, unsigned int b)
      154.   {
      155.       return (unsigned char)(constant_time_ge(a, b));
                                        ^
      156.   }
      157.   

crypto/constant_time_locl.h:148:1: Parameter `a`
        146.   }
        147.   
        148. > static inline unsigned int constant_time_ge(unsigned int a, unsigned int b)
        149.   {
        150.       return ~constant_time_lt(a, b);

crypto/constant_time_locl.h:150:13: Call
        148.   static inline unsigned int constant_time_ge(unsigned int a, unsigned int b)
        149.   {
        150.       return ~constant_time_lt(a, b);
                           ^
        151.   }
        152.   

crypto/constant_time_locl.h:138:1: <LHS trace>
136.   }
137.   
138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
139.   {
140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:138:1: Parameter `a`
          136.   }
          137.   
          138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
          139.   {
          140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:138:1: <RHS trace>
136.   }
137.   
138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
139.   {
140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:138:1: Parameter `b`
          136.   }
          137.   
          138. > static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
          139.   {
          140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));

crypto/constant_time_locl.h:140:12: Binary operation: ([0, 17727] - [0, 17728]):unsigned32 by call to `dtls1_process_record` 
          138.   static inline unsigned int constant_time_lt(unsigned int a, unsigned int b)
          139.   {
          140.       return constant_time_msb(a ^ ((a ^ b) | ((a - b) ^ b)));
                            ^
          141.   }
          142.   
