crypto/asn1/a_d2i_fp.c:166: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 16]):unsigned64 by call to `BUF_MEM_grow_clean`.
Showing all 7 steps of the trace


crypto/asn1/a_d2i_fp.c:150:5: Assignment
148.       int i;
149.       ASN1_const_CTX c;
150.       size_t want = HEADER_SIZE;
           ^
151.       int eos = 0;
152.       size_t off = 0;

crypto/asn1/a_d2i_fp.c:166:38: Call
164.               want -= (len - off);
165.   
166.               if (len + want < len || !BUF_MEM_grow_clean(b, len + want)) {
                                            ^
167.                   ASN1err(ASN1_F_ASN1_D2I_READ_BIO, ERR_R_MALLOC_FAILURE);
168.                   goto err;

crypto/buffer/buffer.c:133:1: <LHS trace>
131.   }
132.   
133. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
134.   {
135.       char *ret;

crypto/buffer/buffer.c:133:1: Parameter `len`
  131.   }
  132.   
  133. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
  134.   {
  135.       char *ret;

crypto/buffer/buffer.c:133:1: <RHS trace>
131.   }
132.   
133. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
134.   {
135.       char *ret;

crypto/buffer/buffer.c:133:1: Parameter `len`
  131.   }
  132.   
  133. > size_t BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
  134.   {
  135.       char *ret;

crypto/buffer/buffer.c:139:9: Binary operation: ([0, +oo] - [0, 16]):unsigned64 by call to `BUF_MEM_grow_clean` 
  137.   
  138.       if (str->length >= len) {
  139.           memset(&str->data[len], 0, str->length - len);
                 ^
  140.           str->length = len;
  141.           return (len);
