ssl/record/rec_layer_s3.c:993: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `ssl3_write_pending`.
Showing all 5 steps of the trace


ssl/record/rec_layer_s3.c:735:1: Parameter `numpipes`
733.   }
734.   
735. > int do_ssl3_write(SSL *s, int type, const unsigned char *buf,
736.                     unsigned int *pipelens, unsigned int numpipes,
737.                     int create_empty_fragment)

ssl/record/rec_layer_s3.c:993:12: Call
991.   
992.       /* we now just need to write the buffer */
993.       return ssl3_write_pending(s, type, buf, totlen);
                  ^
994.    err:
995.       return -1;

ssl/record/rec_layer_s3.c:999:1: <LHS trace>
997.   
998.   /* if s->s3->wbuf.left != 0, we need to call this */
999. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
1000.                          unsigned int len)
1001.   {

ssl/record/rec_layer_s3.c:999:1: Parameter `s->rlayer.numwpipes`
  997.   
  998.   /* if s->s3->wbuf.left != 0, we need to call this */
  999. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf,
  1000.                          unsigned int len)
  1001.   {

ssl/record/rec_layer_s3.c:1018:20: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ssl3_write_pending` 
  1016.           /* Loop until we find a buffer we haven't written out yet */
  1017.           if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
  1018.                   && currbuf < s->rlayer.numwpipes - 1) {
                             ^
  1019.               currbuf++;
  1020.               continue;
