ssl/s23_clnt.c:222: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 16383):unsigned64 by call to `ssl23_get_server_hello`.
Showing all 9 steps of the trace


ssl/s23_clnt.c:141:1: Parameter `s->init_buf->length`
139.   			ssl23_get_client_method)
140.   
141. > int ssl23_connect(SSL *s)
142.   	{
143.   	BUF_MEM *buf=NULL;

ssl/s23_clnt.c:222:8: Call
220.   		case SSL23_ST_CR_SRVR_HELLO_A:
221.   		case SSL23_ST_CR_SRVR_HELLO_B:
222.   			ret=ssl23_get_server_hello(s);
              ^
223.   			if (ret >= 0) cb=NULL;
224.   			goto end;

ssl/s23_clnt.c:501:1: Parameter `s->init_buf->length`
  499.   	}
  500.   
  501. > static int ssl23_get_server_hello(SSL *s)
  502.   	{
  503.   	char buf[8];

ssl/s23_clnt.c:554:8: Call
  552.   		if (s->s3 != NULL) ssl3_free(s);
  553.   
  554.   		if (!BUF_MEM_grow_clean(s->init_buf,
                ^
  555.   			SSL2_MAX_RECORD_LENGTH_3_BYTE_HEADER))
  556.   			{

crypto/buffer/buffer.c:128:1: <LHS trace>
126.   	}
127.   
128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
129.   	{
130.   	char *ret;

crypto/buffer/buffer.c:128:1: Parameter `len`
    126.   	}
    127.   
    128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
    129.   	{
    130.   	char *ret;

crypto/buffer/buffer.c:128:1: <RHS trace>
126.   	}
127.   
128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
129.   	{
130.   	char *ret;

crypto/buffer/buffer.c:128:1: Parameter `len`
    126.   	}
    127.   
    128. > int BUF_MEM_grow_clean(BUF_MEM *str, size_t len)
    129.   	{
    130.   	char *ret;

crypto/buffer/buffer.c:135:3: Binary operation: ([0, +oo] - 16383):unsigned64 by call to `ssl23_get_server_hello` 
    133.   	if (str->length >= len)
    134.   		{
    135.   		memset(&str->data[len],0,str->length-len);
             ^
    136.   		str->length=len;
    137.   		return(len);
