test/sslapitest.c:2552: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_free`.
Showing all 17 steps of the trace


test/sslapitest.c:2467:10: Call
2465.       }
2466.   
2467.       if (!create_ssl_objects(sctx, cctx, &serverssl, &clientssl, NULL, NULL)) {
                 ^
2468.           printf("Unable to create SSL objects\n");
2469.           goto end;

test/ssltestlib.c:580:21: Call
  578.   
  579.       if (*sssl == NULL)
  580.           serverssl = SSL_new(serverctx);
                             ^
  581.       else
  582.           serverssl = *sssl;

ssl/ssl_lib.c:521:1: Parameter `ctx->sessions->num_nodes`
    519.   }
    520.   
    521. > SSL *SSL_new(SSL_CTX *ctx)
    522.   {
    523.       SSL *s;

test/sslapitest.c:2552:5: Call
2550.   end:
2551.       SSL_SESSION_free(sess);
2552.       SSL_free(serverssl);
            ^
2553.       SSL_free(clientssl);
2554.       SSL_CTX_free(sctx);

ssl/ssl_lib.c:963:1: Parameter `s->ctx->sessions->num_nodes`
  961.   }
  962.   
  963. > void SSL_free(SSL *s)
  964.   {
  965.       int i;

ssl/ssl_lib.c:1030:5: Call
  1028.       RECORD_LAYER_release(&s->rlayer);
  1029.   
  1030.       SSL_CTX_free(s->ctx);
              ^
  1031.   
  1032.       ASYNC_WAIT_CTX_free(s->waitctx);

ssl/ssl_lib.c:2780:1: Parameter `a->sessions->num_nodes`
    2778.   }
    2779.   
    2780. > void SSL_CTX_free(SSL_CTX *a)
    2781.   {
    2782.       int i;

ssl/ssl_lib.c:2806:9: Call
    2804.        */
    2805.       if (a->sessions != NULL)
    2806.           SSL_CTX_flush_sessions(a, 0);
                    ^
    2807.   
    2808.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1021:1: Parameter `s->sessions->num_nodes`
      1019.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1020.   
      1021. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      1022.   {
      1023.       unsigned long i;

ssl/ssl_sess.c:1034:5: Call
      1032.       i = lh_SSL_SESSION_get_down_load(s->sessions);
      1033.       lh_SSL_SESSION_set_down_load(s->sessions, 0);
      1034.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                  ^
      1035.       lh_SSL_SESSION_set_down_load(s->sessions, i);
      1036.       CRYPTO_THREAD_unlock(s->lock);

ssl/ssl_sess.c:1019:1: Parameter `lh->num_nodes`
        1017.   }
        1018.   
        1019. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1020.   
        1021.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1019:1: Call
        1017.   }
        1018.   
        1019. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1020.   
        1021.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:182:1: Parameter `lh->num_nodes`
          180.   }
          181.   
          182. > void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          183.   {
          184.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);

crypto/lhash/lhash.c:184:5: Call
          182.   void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          183.   {
          184.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);
                     ^
          185.   }
          186.   

crypto/lhash/lhash.c:150:1: <LHS trace>
148.   }
149.   
150. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
151.                             OPENSSL_LH_DOALL_FUNC func,
152.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:150:1: Parameter `lh->num_nodes`
            148.   }
            149.   
            150. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
            151.                             OPENSSL_LH_DOALL_FUNC func,
            152.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:164:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_free` 
            162.        * memory leaks otherwise
            163.        */
            164.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                            ^
            165.           a = lh->b[i];
            166.           while (a != NULL) {
