ssl/d1_pkt.c:720: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `dtls1_process_record`.
Showing all 15 steps of the trace


ssl/d1_pkt.c:556:1: Parameter `s->ctx->sessions->num_items`
554.    */
555.   /* used only by dtls1_read_bytes */
556. > int dtls1_get_record(SSL *s)
557.   	{
558.   	int ssl_major,ssl_minor;

ssl/d1_pkt.c:570:5: Call
568.   	/* The epoch may have changed.  If so, process all the
569.   	 * pending records.  This is a non-blocking operation. */
570.   	if(dtls1_process_buffered_records(s)<0)
           ^
571.   		return -1;
572.   

ssl/d1_pkt.c:303:1: Parameter `s->ctx->sessions->num_items`
  301.                      &((s)->d1->processed_rcds))
  302.   
  303. > static int
  304.   dtls1_process_buffered_records(SSL *s)
  305.       {

ssl/d1_pkt.c:720:7: Call
718.   		}
719.   
720.   	if (!dtls1_process_record(s))
             ^
721.   		{
722.   		rr->length = 0;

ssl/d1_pkt.c:381:1: Parameter `s->ctx->sessions->num_items`
  379.   #endif
  380.   
  381. > static int
  382.   dtls1_process_record(SSL *s)
  383.   {

ssl/d1_pkt.c:540:2: Call
  538.   
  539.   f_err:
  540.   	ssl3_send_alert(s,SSL3_AL_FATAL,al);
          ^
  541.   err:
  542.   	return(0);

ssl/s3_pkt.c:1798:1: Parameter `s->ctx->sessions->num_items`
    1796.   	}
    1797.   
    1798. > int ssl3_send_alert(SSL *s, int level, int desc)
    1799.   	{
    1800.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1807:3: Call
    1805.   	/* If a fatal one, remove from cache */
    1806.   	if ((level == SSL3_AL_FATAL) && (s->session != NULL))
    1807.   		SSL_CTX_remove_session(s->ctx,s->session);
              ^
    1808.   
    1809.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:683:1: Parameter `ctx->sessions->num_items`
      681.   	}
      682.   
      683. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      684.   {
      685.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:685:9: Call
      683.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      684.   {
      685.   	return remove_session_lock(ctx, c, 1);
                     ^
      686.   }
      687.   

ssl/ssl_sess.c:688:1: Parameter `ctx->sessions->num_items`
        686.   }
        687.   
        688. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
        689.   	{
        690.   	SSL_SESSION *r;

ssl/ssl_sess.c:699:6: Call
        697.   			{
        698.   			ret=1;
        699.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                    ^
        700.   			SSL_SESSION_list_remove(ctx,c);
        701.   			}

crypto/lhash/lhash.c:218:1: <LHS trace>
216.   	}
217.   
218. > void *lh_delete(_LHASH *lh, const void *data)
219.   	{
220.   	unsigned long hash;

crypto/lhash/lhash.c:218:1: Parameter `lh->num_items`
          216.   	}
          217.   
          218. > void *lh_delete(_LHASH *lh, const void *data)
          219.   	{
          220.   	unsigned long hash;

crypto/lhash/lhash.c:241:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `dtls1_process_record` 
          239.   		}
          240.   
          241.   	lh->num_items--;
                  ^
          242.   	if ((lh->num_nodes > MIN_NODES) &&
          243.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
