ssl/s2_pkt.c:156: error: INTEGER_OVERFLOW_L2
  ([0, 32769] - [-oo, 1]):unsigned32 by call to `read_n`.
Showing all 7 steps of the trace


ssl/s2_pkt.c:99:1: Parameter `s->s2->rbuf_left`
97.    * This routine will return 0 to len bytes, decrypted etc if required.
98.    */
99. > int ssl2_read(SSL *s, void *buf, int len)
100.   	{
101.   	int n;

ssl/s2_pkt.c:156:6: Call
154.   		else
155.   			{
156.   			n=read_n(s,2,SSL2_MAX_RECORD_LENGTH_2_BYTE_HEADER+2,0);
            ^
157.   			if (n <= 0) return(n); /* error or non-blocking */
158.   			}

ssl/s2_pkt.c:270:1: <LHS trace>
268.   	}
269.   
270. > static int read_n(SSL *s, unsigned int n, unsigned int max,
271.   	     unsigned int extend)
272.   	{

ssl/s2_pkt.c:270:1: Parameter `max`
  268.   	}
  269.   
  270. > static int read_n(SSL *s, unsigned int n, unsigned int max,
  271.   	     unsigned int extend)
  272.   	{

ssl/s2_pkt.c:270:1: <RHS trace>
268.   	}
269.   
270. > static int read_n(SSL *s, unsigned int n, unsigned int max,
271.   	     unsigned int extend)
272.   	{

ssl/s2_pkt.c:270:1: Parameter `n`
  268.   	}
  269.   
  270. > static int read_n(SSL *s, unsigned int n, unsigned int max,
  271.   	     unsigned int extend)
  272.   	{

ssl/s2_pkt.c:331:6: Binary operation: ([0, 32769] - [-oo, 1]):unsigned32 by call to `read_n` 
  329.   			{
  330.   			s->rwstate=SSL_READING;
  331.   			i=BIO_read(s->rbio,(char *)&(s->s2->rbuf[off+newb]),
              ^
  332.   				max-newb);
  333.   			}
