apps/ocsp.c:879: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 16 steps of the trace


apps/ocsp.c:695:8: Call
693.   			goto end;
694.   			}
695.   		if (!make_serial_index(rdb))
              ^
696.   			goto end;
697.   		}

apps/ca.c:3133:1: Parameter `(*db->index)->num_nodes`
  3131.   	}
  3132.   
  3133. > int make_serial_index(TXT_DB *db)
  3134.   	{
  3135.   	if (!TXT_DB_create_index(db, DB_serial, NULL,

apps/ca.c:3135:7: Call
  3133.   int make_serial_index(TXT_DB *db)
  3134.   	{
  3135.   	if (!TXT_DB_create_index(db, DB_serial, NULL,
                ^
  3136.   				LHASH_HASH_FN(index_serial_hash),
  3137.   				LHASH_COMP_FN(index_serial_cmp)))

crypto/txt_db/txt_db.c:213:1: Parameter `(*db->index)->num_nodes`
    211.   	}
    212.   
    213. > int TXT_DB_create_index(TXT_DB *db, int field, int (*qual)(),
    214.   		LHASH_HASH_FN_TYPE hash, LHASH_COMP_FN_TYPE cmp)
    215.   	{

apps/ocsp.c:862:2: Call
860.   	X509_free(rsigner);
861.   	X509_free(rca_cert);
862.   	TXT_DB_free(rdb);
        ^
863.   	BIO_free_all(cbio);
864.   	BIO_free_all(acbio);

crypto/txt_db/txt_db.c:340:1: Parameter `(*db->index)->num_nodes`
  338.   	}
  339.   
  340. > void TXT_DB_free(TXT_DB *db)
  341.   	{
  342.   	int i,n;

apps/ocsp.c:879:3: Call
877.   		OPENSSL_free(port);
878.   		OPENSSL_free(path);
879.   		SSL_CTX_free(ctx);
         ^
880.   		}
881.   

ssl/ssl_lib.c:1293:1: Parameter `a->sessions->num_nodes`
  1291.   #endif
  1292.   
  1293. > void SSL_CTX_free(SSL_CTX *a)
  1294.   	{
  1295.   	int i;

ssl/ssl_lib.c:1315:3: Call
  1313.   	if (a->sessions != NULL)
  1314.   		{
  1315.   		SSL_CTX_flush_sessions(a,0);
            ^
  1316.   		lh_free(a->sessions);
  1317.   		}

ssl/ssl_sess.c:654:1: Parameter `s->sessions->num_nodes`
    652.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION *, TIMEOUT_PARAM *)
    653.   
    654. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    655.   	{
    656.   	unsigned long i;

ssl/ssl_sess.c:666:2: Call
    664.   	i=tp.cache->down_load;
    665.   	tp.cache->down_load=0;
    666.   	lh_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout), &tp);
            ^
    667.   	tp.cache->down_load=i;
    668.   	CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

crypto/lhash/lhash.c:300:1: Parameter `lh->num_nodes`
      298.   	}
      299.   
      300. > void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      301.   	{
      302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:302:2: Call
      300.   void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      301.   	{
      302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
              ^
      303.   	}
      304.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
        268.   	}
        269.   
        270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
        271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
        272.   	{

crypto/lhash/lhash.c:278:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_CTX_free` 
        276.   	/* reverse the order so we search from 'top to bottom'
        277.   	 * We were having memory leaks otherwise */
        278.   	for (i=lh->num_nodes-1; i>=0; i--)
                     ^
        279.   		{
        280.   		a=lh->b[i];
