test/danetest.c:394: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_free`.
Showing all 20 steps of the trace


test/danetest.c:390:20: Call
388.           }
389.   
390.           if ((ssl = SSL_new(ctx)) == NULL)
                          ^
391.               return -1;
392.           SSL_set_connect_state(ssl);

ssl/ssl_lib.c:614:1: Parameter `ctx->sessions->num_nodes`
  612.   }
  613.   
  614. > SSL *SSL_new(SSL_CTX *ctx)
  615.   {
  616.       SSL *s;

test/danetest.c:425:9: Call
423.           /* Not needed any more, but lead by example and put the error back. */
424.           SSL_set_verify_result(ssl, err);
425.           SSL_free(ssl);
               ^
426.   
427.           if (ok < 0) {

ssl/ssl_lib.c:990:1: Parameter `s->initial_ctx->sessions->num_nodes`
  988.   }
  989.   
  990. > void SSL_free(SSL *s)
  991.   {
  992.       int i;

test/danetest.c:390:20: Call
388.           }
389.   
390.           if ((ssl = SSL_new(ctx)) == NULL)
                          ^
391.               return -1;
392.           SSL_set_connect_state(ssl);

ssl/ssl_lib.c:614:1: Parameter `ctx->sessions->num_nodes`
  612.   }
  613.   
  614. > SSL *SSL_new(SSL_CTX *ctx)
  615.   {
  616.       SSL *s;

test/danetest.c:394:13: Call
392.           SSL_set_connect_state(ssl);
393.           if (SSL_dane_enable(ssl, basename) <= 0) {
394.               SSL_free(ssl);
                   ^
395.               return -1;
396.           }

ssl/ssl_lib.c:990:1: Parameter `s->initial_ctx->sessions->num_nodes`
  988.   }
  989.   
  990. > void SSL_free(SSL *s)
  991.   {
  992.       int i;

ssl/ssl_lib.c:1044:5: Call
  1042.   
  1043.       OPENSSL_free(s->tlsext_hostname);
  1044.       SSL_CTX_free(s->initial_ctx);
              ^
  1045.   #ifndef OPENSSL_NO_EC
  1046.       OPENSSL_free(s->tlsext_ecpointformatlist);

ssl/ssl_lib.c:2392:1: Parameter `a->sessions->num_nodes`
    2390.   }
    2391.   
    2392. > void SSL_CTX_free(SSL_CTX *a)
    2393.   {
    2394.       int i;

ssl/ssl_lib.c:2425:9: Call
    2423.        */
    2424.       if (a->sessions != NULL)
    2425.           SSL_CTX_flush_sessions(a, 0);
                    ^
    2426.   
    2427.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1056:1: Parameter `s->sessions->num_nodes`
      1054.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1055.   
      1056. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      1057.   {
      1058.       unsigned long i;

ssl/ssl_sess.c:1069:5: Call
      1067.       i = CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
      1068.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = 0;
      1069.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                  ^
      1070.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = i;
      1071.       CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

ssl/ssl_sess.c:1054:1: Parameter `lh->num_nodes`
        1052.   }
        1053.   
        1054. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1055.   
        1056.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1054:1: Call
        1052.   }
        1053.   
        1054. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1055.   
        1056.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:273:1: Parameter `lh->num_nodes`
          271.   }
          272.   
          273. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
          274.   {
          275.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:275:5: Call
          273.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
          274.   {
          275.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                     ^
          276.   }
          277.   

crypto/lhash/lhash.c:235:1: <LHS trace>
233.   }
234.   
235. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
236.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
237.   {

crypto/lhash/lhash.c:235:1: Parameter `lh->num_nodes`
            233.   }
            234.   
            235. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
            236.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
            237.   {

crypto/lhash/lhash.c:248:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_free` 
            246.        * memory leaks otherwise
            247.        */
            248.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                            ^
            249.           a = lh->b[i];
            250.           while (a != NULL) {
