ssl/s3_srvr.c:1414: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `ssl_check_clienthello_tlsext_late`.
Showing all 15 steps of the trace


ssl/s3_srvr.c:916:1: Parameter `s->ctx->sessions->num_items`
914.   }
915.   
916. > int ssl3_get_client_hello(SSL *s)
917.   	{
918.   	int i,j,ok,al,ret= -1;

ssl/s3_srvr.c:1186:7: Call
1184.   			}
1185.   		}
1186.   		if (ssl_check_clienthello_tlsext_early(s) <= 0) {
              ^
1187.   			SSLerr(SSL_F_SSL3_GET_CLIENT_HELLO,SSL_R_CLIENTHELLO_TLSEXT);
1188.   			goto err;

ssl/t1_lib.c:1776:1: Parameter `s->ctx->sessions->num_items`
  1774.   	}
  1775.   
  1776. > int ssl_check_clienthello_tlsext_early(SSL *s)
  1777.   	{
  1778.   	int ret=SSL_TLSEXT_ERR_NOACK;

ssl/s3_srvr.c:1414:7: Call
1412.   	if (s->version >= SSL3_VERSION)
1413.   		{
1414.   		if (ssl_check_clienthello_tlsext_late(s) <= 0)
              ^
1415.   			{
1416.   			SSLerr(SSL_F_SSL3_GET_CLIENT_HELLO, SSL_R_CLIENTHELLO_TLSEXT);

ssl/t1_lib.c:1871:1: Parameter `s->ctx->sessions->num_items`
  1869.   	}
  1870.   
  1871. > int ssl_check_clienthello_tlsext_late(SSL *s)
  1872.   	{
  1873.   	int ret = SSL_TLSEXT_ERR_OK;

ssl/t1_lib.c:1924:4: Call
  1922.   		{
  1923.   		case SSL_TLSEXT_ERR_ALERT_FATAL:
  1924.   			ssl3_send_alert(s,SSL3_AL_FATAL,al); 
             ^
  1925.   			return -1;
  1926.   

ssl/s3_pkt.c:1468:1: Parameter `s->ctx->sessions->num_items`
    1466.   	}
    1467.   
    1468. > int ssl3_send_alert(SSL *s, int level, int desc)
    1469.   	{
    1470.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1477:3: Call
    1475.   	/* If a fatal one, remove from cache */
    1476.   	if ((level == 2) && (s->session != NULL))
    1477.   		SSL_CTX_remove_session(s->ctx,s->session);
              ^
    1478.   
    1479.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:698:1: Parameter `ctx->sessions->num_items`
      696.   	}
      697.   
      698. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      699.   {
      700.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:700:9: Call
      698.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      699.   {
      700.   	return remove_session_lock(ctx, c, 1);
                     ^
      701.   }
      702.   

ssl/ssl_sess.c:703:1: Parameter `ctx->sessions->num_items`
        701.   }
        702.   
        703. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
        704.   	{
        705.   	SSL_SESSION *r;

ssl/ssl_sess.c:714:6: Call
        712.   			{
        713.   			ret=1;
        714.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                    ^
        715.   			SSL_SESSION_list_remove(ctx,c);
        716.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(_LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
          215.   	}
          216.   
          217. > void *lh_delete(_LHASH *lh, const void *data)
          218.   	{
          219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `ssl_check_clienthello_tlsext_late` 
          238.   		}
          239.   
          240.   	lh->num_items--;
                  ^
          241.   	if ((lh->num_nodes > MIN_NODES) &&
          242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
