crypto/evp/e_chacha20_poly1305.c:452: error: INTEGER_OVERFLOW_L2
  (13 - [16-max(0, `ctx->cipher_data->num`), 15]):unsigned64 by call to `chacha20_poly1305_cipher`.
Showing all 9 steps of the trace


crypto/evp/e_chacha20_poly1305.c:360:1: Parameter `ctx->cipher_data->num`
358.   }
359.   
360. > static int chacha20_poly1305_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg,
361.                                     void *ptr)
362.   {

crypto/evp/e_chacha20_poly1305.c:452:13: Call
450.               actx->key.counter[3] = actx->nonce[2] ^ CHACHA_U8TOU32(aad+4);
451.               actx->mac_inited = 0;
452.               chacha20_poly1305_cipher(ctx, NULL, aad, EVP_AEAD_TLS1_AAD_LEN);
                   ^
453.               return POLY1305_BLOCK_SIZE;         /* tag length */
454.           }

crypto/evp/e_chacha20_poly1305.c:233:1: Parameter `len`
  231.   }
  232.   
  233. > static int chacha20_poly1305_cipher(EVP_CIPHER_CTX *ctx, unsigned char *out,
  234.                                       const unsigned char *in, size_t len)
  235.   {

crypto/evp/e_chacha20_poly1305.c:254:13: Call
  252.       if (in) {                                   /* aad or text */
  253.           if (out == NULL) {                      /* aad */
  254.               Poly1305_Update(POLY1305_ctx(actx), in, len);
                     ^
  255.               actx->len.aad += len;
  256.               actx->aad = 1;

crypto/poly1305/poly1305.c:457:1: <LHS trace>
455.   }
456.   
457. > void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len)
458.   {
459.   #ifdef POLY1305_ASM

crypto/poly1305/poly1305.c:457:1: Parameter `len`
    455.   }
    456.   
    457. > void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len)
    458.   {
    459.   #ifdef POLY1305_ASM

crypto/poly1305/poly1305.c:457:1: <RHS trace>
455.   }
456.   
457. > void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len)
458.   {
459.   #ifdef POLY1305_ASM

crypto/poly1305/poly1305.c:457:1: Parameter `len`
    455.   }
    456.   
    457. > void Poly1305_Update(POLY1305 *ctx, const unsigned char *inp, size_t len)
    458.   {
    459.   #ifdef POLY1305_ASM

crypto/poly1305/poly1305.c:476:13: Binary operation: (13 - [16-max(0, ctx->cipher_data->num), 15]):unsigned64 by call to `chacha20_poly1305_cipher` 
    474.               poly1305_blocks(ctx->opaque, ctx->data, POLY1305_BLOCK_SIZE, 1);
    475.               inp += rem;
    476.               len -= rem;
                       ^
    477.           } else {
    478.               /* Still not enough data to process a block. */
