crypto/property/defn_cache.c:101: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `lh_PROPERTY_DEFN_ELEM_delete`.
Showing all 6 steps of the trace


crypto/property/defn_cache.c:101:9: Call
99.       if (pl == NULL) {
100.           elem.prop = prop;
101.           lh_PROPERTY_DEFN_ELEM_delete(property_defns, &elem);
               ^
102.           return 1;
103.       }

crypto/property/defn_cache.c:30:1: Parameter `lh->num_items`
  28.   } PROPERTY_DEFN_ELEM;
  29.   
  30. > DEFINE_LHASH_OF(PROPERTY_DEFN_ELEM);
  31.   
  32.   static unsigned long property_defn_hash(const PROPERTY_DEFN_ELEM *a)

crypto/property/defn_cache.c:30:1: Call
  28.   } PROPERTY_DEFN_ELEM;
  29.   
  30. > DEFINE_LHASH_OF(PROPERTY_DEFN_ELEM);
  31.   
  32.   static unsigned long property_defn_hash(const PROPERTY_DEFN_ELEM *a)

crypto/lhash/lhash.c:137:1: <LHS trace>
135.   }
136.   
137. > void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)
138.   {
139.       unsigned long hash;

crypto/lhash/lhash.c:137:1: Parameter `lh->num_items`
    135.   }
    136.   
    137. > void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)
    138.   {
    139.       unsigned long hash;

crypto/lhash/lhash.c:157:5: Binary operation: ([0, +oo] - 1):unsigned64 by call to `lh_PROPERTY_DEFN_ELEM_delete` 
    155.       }
    156.   
    157.       lh->num_items--;
               ^
    158.       if ((lh->num_nodes > MIN_NODES) &&
    159.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))

void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)
{
    unsigned long hash;
    OPENSSL_LH_NODE *nn, **rn;
    void *ret;
    lh->error = 0;
    rn = getrn(lh, data, &hash);
    if (*rn == NULL) {
        lh->num_no_delete++;
        return NULL;
    } else {
        nn = *rn;
        *rn = nn->next;
        ret = nn->data;
        OPENSSL_free(nn);
        lh->num_delete++;
    }
    lh->num_items--;
    if ((lh->num_nodes > MIN_NODES) &&
        (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
        contract(lh);
    return ret;
}
['int ossl_prop_defn_set(OPENSSL_CTX *ctx, const char *prop,\n                       OSSL_PROPERTY_LIST *pl)\n{\n    PROPERTY_DEFN_ELEM elem, *old, *p = NULL;\n    size_t len;\n    LHASH_OF(PROPERTY_DEFN_ELEM) *property_defns;\n    property_defns = openssl_ctx_get_data(ctx, OPENSSL_CTX_PROPERTY_DEFN_INDEX,\n                                          &property_defns_method);\n    if (property_defns == NULL)\n        return 0;\n    if (prop == NULL)\n        return 1;\n    if (pl == NULL) {\n        elem.prop = prop;\n        lh_PROPERTY_DEFN_ELEM_delete(property_defns, &elem);\n        return 1;\n    }\n    len = strlen(prop);\n    p = OPENSSL_malloc(sizeof(*p) + len);\n    if (p != NULL) {\n        p->prop = p->body;\n        p->defn = pl;\n        memcpy(p->body, prop, len + 1);\n        old = lh_PROPERTY_DEFN_ELEM_insert(property_defns, p);\n        if (old != NULL) {\n            property_defn_free(old);\n            return 1;\n        }\n        if (!lh_PROPERTY_DEFN_ELEM_error(property_defns))\n            return 1;\n    }\n    OPENSSL_free(p);\n    return 0;\n}', 'DEFINE_LHASH_OF(PROPERTY_DEFN_ELEM)', 'void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)\n{\n    unsigned long hash;\n    OPENSSL_LH_NODE *nn, **rn;\n    void *ret;\n    lh->error = 0;\n    rn = getrn(lh, data, &hash);\n    if (*rn == NULL) {\n        lh->num_no_delete++;\n        return NULL;\n    } else {\n        nn = *rn;\n        *rn = nn->next;\n        ret = nn->data;\n        OPENSSL_free(nn);\n        lh->num_delete++;\n    }\n    lh->num_items--;\n    if ((lh->num_nodes > MIN_NODES) &&\n        (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))\n        contract(lh);\n    return ret;\n}']