ssl/record/rec_layer_s3.c:945: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - [0, 2]):unsigned64 by call to `WPACKET_close`.
Showing all 10 steps of the trace


ssl/record/rec_layer_s3.c:733:14: Call
731.   #endif
732.           SSL3_BUFFER_set_offset(wb, align);
733.           if (!WPACKET_init_static_len(&pkt[0], SSL3_BUFFER_get_buf(wb),
                    ^
734.                                        SSL3_BUFFER_get_len(wb), 0)
735.                   || !WPACKET_allocate_bytes(&pkt[0], align, NULL)) {

ssl/packet.c:117:1: Parameter `pkt->curr`
  115.   }
  116.   
  117. > int WPACKET_init_static_len(WPACKET *pkt, unsigned char *buf, size_t len,
  118.                               size_t lenbytes)
  119.   {

ssl/record/rec_layer_s3.c:945:21: Call
943.   
944.           if (!WPACKET_get_length(thispkt, &len)
945.                   || !WPACKET_close(thispkt)) {
                           ^
946.               SSLerr(SSL_F_DO_SSL3_WRITE, ERR_R_INTERNAL_ERROR);
947.               goto err;

ssl/packet.c:220:1: Parameter `pkt->curr`
  218.   }
  219.   
  220. > int WPACKET_close(WPACKET *pkt)
  221.   {
  222.       /*

ssl/packet.c:229:12: Call
  227.           return 0;
  228.   
  229.       return wpacket_intern_close(pkt);
                    ^
  230.   }
  231.   

ssl/packet.c:186:1: <LHS trace>
184.    * close a sub-packet and write out its length if necessary.
185.    */
186. > static int wpacket_intern_close(WPACKET *pkt)
187.   {
188.       WPACKET_SUB *sub = pkt->subs;

ssl/packet.c:186:1: Parameter `pkt->curr`
    184.    * close a sub-packet and write out its length if necessary.
    185.    */
    186. > static int wpacket_intern_close(WPACKET *pkt)
    187.   {
    188.       WPACKET_SUB *sub = pkt->subs;

ssl/packet.c:186:1: <RHS trace>
184.    * close a sub-packet and write out its length if necessary.
185.    */
186. > static int wpacket_intern_close(WPACKET *pkt)
187.   {
188.       WPACKET_SUB *sub = pkt->subs;

ssl/packet.c:186:1: Parameter `pkt->subs->lenbytes`
    184.    * close a sub-packet and write out its length if necessary.
    185.    */
    186. > static int wpacket_intern_close(WPACKET *pkt)
    187.   {
    188.       WPACKET_SUB *sub = pkt->subs;

ssl/packet.c:198:13: Binary operation: ([0, +oo] - [0, 2]):unsigned64 by call to `WPACKET_close` 
    196.               && sub->flags & WPACKET_FLAGS_ABANDON_ON_ZERO_LENGTH) {
    197.           /* Deallocate any bytes allocated for the length of the WPACKET */
    198.           if ((pkt->curr - sub->lenbytes) == sub->packet_len) {
                       ^
    199.               pkt->written -= sub->lenbytes;
    200.               pkt->curr -= sub->lenbytes;
