ssl/s3_cbc.c:409: error: INTEGER_OVERFLOW_L2
  ([13, `mac_secret_length` + 1048633] - [14-min(1, `data_plus_mac_plus_padding_size`), `mac_secret_length` + 59]):unsigned32.
Showing all 5 steps of the trace


ssl/s3_cbc.c:129:1: <LHS trace>
127.    * Returns 1 on success or 0 on error
128.    */
129. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
130.                              unsigned char *md_out,
131.                              size_t *md_out_size,

ssl/s3_cbc.c:129:1: Parameter `data_plus_mac_plus_padding_size`
127.    * Returns 1 on success or 0 on error
128.    */
129. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
130.                              unsigned char *md_out,
131.                              size_t *md_out_size,

ssl/s3_cbc.c:129:1: <RHS trace>
127.    * Returns 1 on success or 0 on error
128.    */
129. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
130.                              unsigned char *md_out,
131.                              size_t *md_out_size,

ssl/s3_cbc.c:129:1: Parameter `data_plus_mac_plus_padding_size`
127.    * Returns 1 on success or 0 on error
128.    */
129. > int ssl3_cbc_digest_record(const EVP_MD_CTX *ctx,
130.                              unsigned char *md_out,
131.                              size_t *md_out_size,

ssl/s3_cbc.c:409:21: Binary operation: ([13, mac_secret_length + 1048633] - [14-min(1, data_plus_mac_plus_padding_size), mac_secret_length + 59]):unsigned32
407.                   b = header[k];
408.               else if (k < data_plus_mac_plus_padding_size + header_length)
409.                   b = data[k - header_length];
                           ^
410.               k++;
411.   
