crypto/pem/pem_lib.c:385: error: INTEGER_OVERFLOW_L2
  ([0, 2147483647] - 1):unsigned64 by call to `PEM_dek_info`.
Showing all 17 steps of the trace


crypto/pem/pem_lib.c:384:9: Call
382.   
383.           buf[0] = '\0';
384.           PEM_proc_type(buf, PEM_TYPE_ENCRYPTED);
               ^
385.           PEM_dek_info(buf, objstr, EVP_CIPHER_iv_length(enc), (char *)iv);
386.           /* k=strlen(buf); */

crypto/pem/pem_lib.c:85:5: Call
  83.           str = "BAD-TYPE";
  84.   
  85.       BIO_snprintf(p, PEM_BUFSIZE - (size_t)(p - buf), "Proc-Type: 4,%s\n", str);
            ^
  86.   }
  87.   

crypto/bio/b_print.c:905:11: Call
    903.       va_start(args, format);
    904.   
    905.       ret = BIO_vsnprintf(buf, n, format, args);
                     ^
    906.   
    907.       va_end(args);

crypto/bio/b_print.c:916:10: Call
      914.       int truncated;
      915.   
      916.       if (!_dopr(&buf, NULL, &n, &retlen, &truncated, format, args))
                      ^
      917.           return -1;
      918.   

crypto/bio/b_print.c:114:22: Call
        112.                   state = DP_S_FLAGS;
        113.               else
        114.                   if (!doapr_outch(sbuffer, buffer, &currlen, maxlen, ch))
                                    ^
        115.                       return 0;
        116.               ch = *format++;

crypto/bio/b_print.c:804:1: Parameter `*maxlen`
          802.   #define BUFFER_INC  1024
          803.   
          804. > static int
          805.   doapr_outch(char **sbuffer,
          806.               char **buffer, size_t *currlen, size_t *maxlen, int c)

crypto/pem/pem_lib.c:385:9: Call
383.           buf[0] = '\0';
384.           PEM_proc_type(buf, PEM_TYPE_ENCRYPTED);
385.           PEM_dek_info(buf, objstr, EVP_CIPHER_iv_length(enc), (char *)iv);
               ^
386.           /* k=strlen(buf); */
387.   

crypto/pem/pem_lib.c:88:1: Parameter `*buf`
  86.   }
  87.   
  88. > void PEM_dek_info(char *buf, const char *type, int len, char *str)
  89.   {
  90.       long i;

crypto/pem/pem_lib.c:92:5: Assignment
  90.       long i;
  91.       char *p = buf + strlen(buf);
  92.       int j = PEM_BUFSIZE - (size_t)(p - buf), n;
            ^
  93.   
  94.       n = BIO_snprintf(p, j, "DEK-Info: %s,", type);

crypto/pem/pem_lib.c:94:9: Call
  92.       int j = PEM_BUFSIZE - (size_t)(p - buf), n;
  93.   
  94.       n = BIO_snprintf(p, j, "DEK-Info: %s,", type);
                ^
  95.       if (n > 0) {
  96.           j -= n;

crypto/bio/b_print.c:898:1: Parameter `n`
    896.    * function should be renamed, but to what?)
    897.    */
    898. > int BIO_snprintf(char *buf, size_t n, const char *format, ...)
    899.   {
    900.       va_list args;

crypto/bio/b_print.c:905:11: Call
    903.       va_start(args, format);
    904.   
    905.       ret = BIO_vsnprintf(buf, n, format, args);
                     ^
    906.   
    907.       va_end(args);

crypto/bio/b_print.c:911:1: Parameter `n`
      909.   }
      910.   
      911. > int BIO_vsnprintf(char *buf, size_t n, const char *format, va_list args)
      912.   {
      913.       size_t retlen;

crypto/bio/b_print.c:916:10: Call
      914.       int truncated;
      915.   
      916.       if (!_dopr(&buf, NULL, &n, &retlen, &truncated, format, args))
                      ^
      917.           return -1;
      918.   

crypto/bio/b_print.c:83:1: <LHS trace>
81.   #define OSSL_MAX(p,q) ((p >= q) ? p : q)
82.   
83. > static int
84.   _dopr(char **sbuffer,
85.         char **buffer,

crypto/bio/b_print.c:83:1: Parameter `*maxlen`
        81.   #define OSSL_MAX(p,q) ((p >= q) ? p : q)
        82.   
        83. > static int
        84.   _dopr(char **sbuffer,
        85.         char **buffer,

crypto/bio/b_print.c:353:23: Binary operation: ([0, 2147483647] - 1):unsigned64 by call to `PEM_dek_info` 
        351.        */
        352.       if (buffer == NULL) {
        353.           *truncated = (currlen > *maxlen - 1);
                                     ^
        354.           if (*truncated)
        355.               currlen = *maxlen - 1;
