ssl/s3_srvr.c:357: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `ssl3_get_client_hello`.
Showing all 15 steps of the trace


ssl/s3_srvr.c:214:1: Parameter `s->ctx->sessions->num_items`
212.   			ssl3_get_server_method)
213.   
214. > int ssl3_accept(SSL *s)
215.   	{
216.   	BUF_MEM *buf;

ssl/s3_srvr.c:357:9: Call
355.   			if (s->rwstate != SSL_X509_LOOKUP)
356.   			{
357.   				ret=ssl3_get_client_hello(s);
               ^
358.   				if (ret <= 0) goto end;
359.   			}

ssl/s3_srvr.c:917:1: Parameter `s->ctx->sessions->num_items`
  915.   }
  916.   
  917. > int ssl3_get_client_hello(SSL *s)
  918.   	{
  919.   	int i,j,ok,al,ret= -1;

ssl/s3_srvr.c:1094:18: Call
  1092.   		goto f_err;
  1093.   		}
  1094.   	if ((i > 0) && (ssl_bytes_to_cipher_list(s,p,i,&(ciphers))
                           ^
  1095.   		== NULL))
  1096.   		{

ssl/ssl_lib.c:1425:1: Parameter `s->ctx->sessions->num_items`
    1423.   	}
    1424.   
    1425. > STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list(SSL *s,unsigned char *p,int num,
    1426.   					       STACK_OF(SSL_CIPHER) **skp)
    1427.   	{

ssl/ssl_lib.c:1459:5: Call
    1457.   				{
    1458.   				SSLerr(SSL_F_SSL_BYTES_TO_CIPHER_LIST,SSL_R_SCSV_RECEIVED_WHEN_RENEGOTIATING);
    1459.   				ssl3_send_alert(s,SSL3_AL_FATAL,SSL_AD_HANDSHAKE_FAILURE); 
                ^
    1460.   				goto err;
    1461.   				}

ssl/s3_pkt.c:1452:1: Parameter `s->ctx->sessions->num_items`
      1450.   	}
      1451.   
      1452. > int ssl3_send_alert(SSL *s, int level, int desc)
      1453.   	{
      1454.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1461:3: Call
      1459.   	/* If a fatal one, remove from cache */
      1460.   	if ((level == 2) && (s->session != NULL))
      1461.   		SSL_CTX_remove_session(s->ctx,s->session);
                ^
      1462.   
      1463.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:696:1: Parameter `ctx->sessions->num_items`
        694.   	}
        695.   
        696. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        697.   {
        698.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:698:9: Call
        696.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        697.   {
        698.   	return remove_session_lock(ctx, c, 1);
                       ^
        699.   }
        700.   

ssl/ssl_sess.c:701:1: Parameter `ctx->sessions->num_items`
          699.   }
          700.   
          701. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
          702.   	{
          703.   	SSL_SESSION *r;

ssl/ssl_sess.c:712:6: Call
          710.   			{
          711.   			ret=1;
          712.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                      ^
          713.   			SSL_SESSION_list_remove(ctx,c);
          714.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(_LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
            215.   	}
            216.   
            217. > void *lh_delete(_LHASH *lh, const void *data)
            218.   	{
            219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `ssl3_get_client_hello` 
            238.   		}
            239.   
            240.   	lh->num_items--;
                    ^
            241.   	if ((lh->num_nodes > MIN_NODES) &&
            242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
