ssl/statem/statem.c:775: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `statem_do_write`.
Showing all 11 steps of the trace


ssl/statem/statem.c:690:1: Parameter `s->rlayer.numwpipes`
688.    * result in an NBIO event.
689.    */
690. > static SUB_STATE_RETURN write_state_machine(SSL *s)
691.   {
692.       OSSL_STATEM *st = &s->statem;

ssl/statem/statem.c:775:19: Call
773.                   dtls1_start_timer(s);
774.               }
775.               ret = statem_do_write(s);
                         ^
776.               if (ret <= 0) {
777.                   return SUB_STATE_ERROR;

ssl/statem/statem.c:634:1: Parameter `s->rlayer.numwpipes`
  632.    * Send a previously constructed message to the peer.
  633.    */
  634. > static int statem_do_write(SSL *s)
  635.   {
  636.       OSSL_STATEM *st = &s->statem;

ssl/statem/statem.c:643:20: Call
  641.               return dtls1_do_write(s, SSL3_RT_CHANGE_CIPHER_SPEC);
  642.           else
  643.               return ssl3_do_write(s, SSL3_RT_CHANGE_CIPHER_SPEC);
                            ^
  644.       } else {
  645.           return ssl_do_write(s);

ssl/statem/statem_lib.c:30:1: Parameter `s->rlayer.numwpipes`
    28.    * SSL3_RT_CHANGE_CIPHER_SPEC)
    29.    */
    30. > int ssl3_do_write(SSL *s, int type)
    31.   {
    32.       int ret;

ssl/statem/statem_lib.c:35:11: Call
    33.       size_t written = 0;
    34.   
    35.       ret = ssl3_write_bytes(s, type, &s->init_buf->data[s->init_off],
                    ^
    36.                              s->init_num, &written);
    37.       if (ret < 0)

ssl/record/rec_layer_s3.c:346:1: Parameter `s->rlayer.numwpipes`
      344.    * not all data has been sent or non-blocking IO.
      345.    */
      346. > int ssl3_write_bytes(SSL *s, int type, const void *buf_, size_t len,
      347.                        size_t *written)
      348.   {

ssl/record/rec_layer_s3.c:392:13: Call
      390.        */
      391.       if (wb->left != 0) {
      392.           i = ssl3_write_pending(s, type, &buf[tot], s->rlayer.wpend_tot,
                         ^
      393.                                  &tmpwrit);
      394.           if (i <= 0) {

ssl/record/rec_layer_s3.c:899:1: <LHS trace>
897.    * Return values are as per SSL_write()
898.    */
899. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
900.                          size_t *written)
901.   {

ssl/record/rec_layer_s3.c:899:1: Parameter `s->rlayer.numwpipes`
        897.    * Return values are as per SSL_write()
        898.    */
        899. > int ssl3_write_pending(SSL *s, int type, const unsigned char *buf, size_t len,
        900.                          size_t *written)
        901.   {

ssl/record/rec_layer_s3.c:918:16: Binary operation: ([0, +oo] - 1):unsigned64 by call to `statem_do_write` 
        916.           /* Loop until we find a buffer we haven't written out yet */
        917.           if (SSL3_BUFFER_get_left(&wb[currbuf]) == 0
        918.               && currbuf < s->rlayer.numwpipes - 1) {
                              ^
        919.               currbuf++;
        920.               continue;
