ssl/statem/statem_srvr.c:1571: error: INTEGER_OVERFLOW_L2
  ([1, `s->clienthello->ciphersuites.remaining`] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list`.
Showing all 13 steps of the trace


ssl/statem/statem_srvr.c:1454:1: Parameter `s->clienthello->ciphersuites.remaining`
1452.   }
1453.   
1454. > static int tls_early_post_process_client_hello(SSL *s, int *pal)
1455.   {
1456.       unsigned int j;

ssl/statem/statem_srvr.c:1569:10: Call
1567.       s->hit = 0;
1568.   
1569.       if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
                 ^
1570.                                 clienthello->isv2, &al) ||
1571.           !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,

ssl/ssl_lib.c:4751:1: Parameter `cipher_suites->remaining`
  4749.   #define SSLV2_CIPHER_LEN    3
  4750.   
  4751. > int ssl_cache_cipherlist(SSL *s, PACKET *cipher_suites, int sslv2format,
  4752.                            int *al)
  4753.   {

ssl/statem/statem_srvr.c:1571:10: Call
1569.       if (!ssl_cache_cipherlist(s, &clienthello->ciphersuites,
1570.                                 clienthello->isv2, &al) ||
1571.           !bytes_to_cipher_list(s, &clienthello->ciphersuites, &ciphers, &scsvs,
                 ^
1572.                                clienthello->isv2, &al)) {
1573.           goto err;

ssl/ssl_lib.c:4834:1: Parameter `cipher_suites->remaining`
  4832.   }
  4833.   
  4834. > int bytes_to_cipher_list(SSL *s, PACKET *cipher_suites,
  4835.                            STACK_OF(SSL_CIPHER) **skp,
  4836.                            STACK_OF(SSL_CIPHER) **scsvs_out,

ssl/ssl_lib.c:4869:12: Call
  4867.       }
  4868.   
  4869.       while (PACKET_copy_bytes(cipher_suites, cipher, n)) {
                     ^
  4870.           /*
  4871.            * SSLv3 ciphers wrapped in an SSLv2-compatible ClientHello have the

ssl/packet_locl.h:379:8: Parameter `len`
    377.    * The caller is responsible for ensuring that |data| can hold |len| bytes.
    378.    */
    379.   __owur static ossl_inline int PACKET_copy_bytes(PACKET *pkt,
                  ^
    380.                                                   unsigned char *data, size_t len)
    381.   {

ssl/packet_locl.h:385:5: Call
    383.           return 0;
    384.   
    385.       packet_forward(pkt, len);
               ^
    386.   
    387.       return 1;

ssl/packet_locl.h:33:1: <LHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `pkt->remaining`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:33:1: <RHS trace>
31.   
32.   /* Internal unchecked shorthand; don't use outside this file. */
33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
34.   {
35.       pkt->curr += len;

ssl/packet_locl.h:33:1: Parameter `len`
      31.   
      32.   /* Internal unchecked shorthand; don't use outside this file. */
      33. > static ossl_inline void packet_forward(PACKET *pkt, size_t len)
      34.   {
      35.       pkt->curr += len;

ssl/packet_locl.h:36:5: Binary operation: ([1, s->clienthello->ciphersuites.remaining] - [2, 3]):unsigned64 by call to `bytes_to_cipher_list` 
      34.   {
      35.       pkt->curr += len;
      36.       pkt->remaining -= len;
                ^
      37.   }
      38.   
