ssl/t1_enc.c:1036: error: INTEGER_OVERFLOW_L2
  ([13, +oo] - [16, 64]):unsigned32 by call to `ssl3_cbc_digest_record`.
Showing all 8 steps of the trace


ssl/t1_enc.c:975:1: Parameter `ssl->s3->read_mac_secret_size`
973.   }
974.   
975. > int tls1_mac(SSL *ssl, unsigned char *md, int send)
976.   {
977.       SSL3_RECORD *rec;

ssl/t1_enc.c:1036:9: Call
1034.            */
1035.           /* Final param == not SSLv3 */
1036.           ssl3_cbc_digest_record(mac_ctx,
                ^
1037.                                  md, &md_size,
1038.                                  header, rec->input,

ssl/s3_cbc.c:409:1: <LHS trace>
407.    * padding too. )
408.    */
409. > void ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
410.                               unsigned char *md_out,
411.                               size_t *md_out_size,

ssl/s3_cbc.c:409:1: Parameter `data_plus_mac_plus_padding_size`
  407.    * padding too. )
  408.    */
  409. > void ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
  410.                               unsigned char *md_out,
  411.                               size_t *md_out_size,

ssl/s3_cbc.c:547:5: Assignment
  545.        * (SSLv3)
  546.        */
  547.       len = data_plus_mac_plus_padding_size + header_length;
             ^
  548.       /*
  549.        * max_mac_bytes contains the maximum bytes of bytes in the MAC,

ssl/s3_cbc.c:457:9: <RHS trace>
455.           md_transform =
456.               (void (*)(void *ctx, const unsigned char *block))MD5_Transform;
457.           md_size = 16;
               ^
458.           sslv3_pad_length = 48;
459.           length_is_big_endian = 0;

ssl/s3_cbc.c:457:9: Assignment
  455.           md_transform =
  456.               (void (*)(void *ctx, const unsigned char *block))MD5_Transform;
  457.           md_size = 16;
                 ^
  458.           sslv3_pad_length = 48;
  459.           length_is_big_endian = 0;

ssl/s3_cbc.c:552:5: Binary operation: ([13, +oo] - [16, 64]):unsigned32 by call to `ssl3_cbc_digest_record` 
  550.        * including * |header|, assuming that there's no padding.
  551.        */
  552.       max_mac_bytes = len - md_size - 1;
             ^
  553.       /* num_blocks is the maximum number of hash blocks. */
  554.       num_blocks =
