apps/ciphers.c:249: error: INTEGER_OVERFLOW_L2
  ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 13 steps of the trace


apps/ciphers.c:174:6: Call
172.   	OpenSSL_add_ssl_algorithms();
173.   
174.   	ctx=SSL_CTX_new(meth);
            ^
175.   	if (ctx == NULL) goto err;
176.   	if (ciphers != NULL) {

ssl/ssl_lib.c:2064:16: Call
  2062.   	ret->app_verify_cookie_cb=0;
  2063.   
  2064.   	ret->sessions=lh_SSL_SESSION_new();
                         ^
  2065.   	if (ret->sessions == NULL) goto err;
  2066.   	ret->cert_store=X509_STORE_new();

crypto/lhash/lhash.c:127:2: Assignment
    125.   	ret->comp=((c == NULL)?(LHASH_COMP_FN_TYPE)strcmp:c);
    126.   	ret->hash=((h == NULL)?(LHASH_HASH_FN_TYPE)lh_strhash:h);
    127.   	ret->num_nodes=MIN_NODES/2;
            ^
    128.   	ret->num_alloc_nodes=MIN_NODES;
    129.   	ret->p=0;

apps/ciphers.c:249:19: Call
247.   	if (use_supported && sk)
248.   		sk_SSL_CIPHER_free(sk);
249.   	if (ctx != NULL) SSL_CTX_free(ctx);
                         ^
250.   	if (ssl != NULL) SSL_free(ssl);
251.   	if (STDout != NULL) BIO_free_all(STDout);

ssl/ssl_lib.c:2214:1: Parameter `a->sessions->num_nodes`
  2212.   #endif
  2213.   
  2214. > void SSL_CTX_free(SSL_CTX *a)
  2215.   	{
  2216.   	int i;

ssl/ssl_lib.c:2246:3: Call
  2244.   	 */
  2245.   	if (a->sessions != NULL)
  2246.   		SSL_CTX_flush_sessions(a,0);
            ^
  2247.   
  2248.   	CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:964:1: Parameter `s->sessions->num_nodes`
    962.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
    963.   
    964. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    965.   	{
    966.   	unsigned long i;

ssl/ssl_sess.c:976:2: Call
    974.   	i=CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
    975.   	CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load=0;
    976.   	lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
            ^
    977.   				 TIMEOUT_PARAM, &tp);
    978.   	CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load=i;

crypto/lhash/lhash.c:305:1: Parameter `lh->num_nodes`
      303.   	}
      304.   
      305. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      306.   	{
      307.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:307:2: Call
      305.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      306.   	{
      307.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
              ^
      308.   	}
      309.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
        268.   	}
        269.   
        270. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
        271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
        272.   	{

crypto/lhash/lhash.c:281:7: Binary operation: ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free` 
        279.   	/* reverse the order so we search from 'top to bottom'
        280.   	 * We were having memory leaks otherwise */
        281.   	for (i=lh->num_nodes-1; i>=0; i--)
                     ^
        282.   		{
        283.   		a=lh->b[i];
