ssl/statem/statem.c:723: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 2]):unsigned64 by call to `WPACKET_finish`.
Showing all 10 steps of the trace


ssl/statem/statem.c:723:25: Call
721.                       || (confunc != NULL && !confunc(s, &pkt))
722.                       || !ssl_close_construct_packet(s, &pkt, mt)
723.                       || !WPACKET_finish(&pkt)) {
                               ^
724.                   WPACKET_cleanup(&pkt);
725.                   ossl_statem_set_error(s);

ssl/packet.c:257:1: Parameter `pkt->subs->lenbytes`
  255.   }
  256.   
  257. > int WPACKET_finish(WPACKET *pkt)
  258.   {
  259.       int ret;

ssl/statem/statem.c:723:25: Call
721.                       || (confunc != NULL && !confunc(s, &pkt))
722.                       || !ssl_close_construct_packet(s, &pkt, mt)
723.                       || !WPACKET_finish(&pkt)) {
                               ^
724.                   WPACKET_cleanup(&pkt);
725.                   ossl_statem_set_error(s);

ssl/packet.c:257:1: Parameter `pkt->curr`
  255.   }
  256.   
  257. > int WPACKET_finish(WPACKET *pkt)
  258.   {
  259.       int ret;

ssl/packet.c:268:11: Call
  266.           return 0;
  267.   
  268.       ret = wpacket_intern_close(pkt, pkt->subs, 1);
                   ^
  269.       if (ret) {
  270.           OPENSSL_free(pkt->subs);

ssl/packet.c:188:1: <LHS trace>
186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
187.    */
188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
189.   {
190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:188:1: Parameter `pkt->curr`
    186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
    187.    */
    188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
    189.   {
    190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:188:1: <RHS trace>
186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
187.    */
188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
189.   {
190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:188:1: Parameter `sub->lenbytes`
    186.    * (i.e. it fills in all the lengths), but doesn't actually close anything.
    187.    */
    188. > static int wpacket_intern_close(WPACKET *pkt, WPACKET_SUB *sub, int doclose)
    189.   {
    190.       size_t packlen = pkt->written - sub->pwritten;

ssl/packet.c:203:13: Binary operation: ([0, +oo] - [0, 2]):unsigned64 by call to `WPACKET_finish` 
    201.   
    202.           /* Deallocate any bytes allocated for the length of the WPACKET */
    203.           if ((pkt->curr - sub->lenbytes) == sub->packet_len) {
                       ^
    204.               pkt->written -= sub->lenbytes;
    205.               pkt->curr -= sub->lenbytes;
