ssl/statem/statem_srvr.c:1578: error: INTEGER_OVERFLOW_L2
  ([1, `s->clienthello->ciphersuites.remaining`] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list`.
Showing all 13 steps of the trace


ssl/statem/statem_srvr.c:1453:1: Parameter `s->clienthello->ciphersuites.remaining`
1451.   }
1452.   
1453. > static int tls_early_post_process_client_hello(SSL *s)
1454.   {
1455.       unsigned int j;

ssl/statem/statem_srvr.c:1576:10: Call
1574.       s->hit = 0;
1575.   
1576.       if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
                 ^
1577.                                 clienthello->isv2) ||
1578.           !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,

ssl/ssl_lib.c:4976:1: Parameter `cipher_suites->remaining`
  4974.   #define SSLV2_CIPHER_LEN    3
  4975.   
  4976. > int ssl_cache_cipherlist(SSL *s, PACKET *cipher_suites, int sslv2format)
  4977.   {
  4978.       int n;

ssl/statem/statem_srvr.c:1578:10: Call
1576.       if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
1577.                                 clienthello->isv2) ||
1578.           !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,
                 ^
1579.                                clienthello->isv2, 1)) {
1580.           /* SSLfatal() already called */

ssl/ssl_lib.c:5057:1: Parameter `cipher_suites->remaining`
  5055.   }
  5056.   
  5057. > int bytes_to_cipher_list(SSL *s, PACKET *cipher_suites,
  5058.                            STACK_OF(SSL_CIPHER) **skp,
  5059.                            STACK_OF(SSL_CIPHER) **scsvs_out,

ssl/ssl_lib.c:5101:12: Call
  5099.       }
  5100.   
  5101.       while (PACKET_copy_bytes(cipher_suites, cipher, n)) {
                     ^
  5102.           /*
  5103.            * SSLv3 ciphers wrapped in an SSLv2-compatible ClientHello have the

ssl/packet_locl.h:379:8: Parameter `len`
    377.    * The caller is responsible for ensuring that |data| can hold |len| bytes.
    378.    */
    379.   __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
                  ^
    380.                                                   unsigned char *data, size_t len)
    381.   {

ssl/packet_locl.h:385:5: Call
    383.           return 0;
    384.   
    385.       packet_forward(pkt, len);
               ^
    386.   
    387.       return 1;

ssl/packet_locl.h:33:1: <LHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `pkt->remaining`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:33:1: <RHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `len`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:36:5: Binary operation: ([1, s->clienthello->ciphersuites.remaining] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list` 
      34.   {
      35.       pkt->curr += len;
      36.       pkt->remaining -= len;
                ^
      37.   }
      38.   
