apps/x509.c:879: error: INTEGER_OVERFLOW_L2
  ([0, 10] - 1):unsigned32 by call to `X509_STORE_free`.
Showing all 11 steps of the trace


apps/x509.c:191:6: Call
189.   	CAkeyformat=FORMAT_PEM;
190.   
191.   	ctx=X509_STORE_new();
            ^
192.   	if (ctx == NULL) goto end;
193.   	X509_STORE_set_verify_cb_func(ctx,callb);

crypto/x509/x509_lu.c:202:13: Call
  200.   	if ((ret=(X509_STORE *)Malloc(sizeof(X509_STORE))) == NULL)
  201.   		return(NULL);
  202.   	ret->certs=lh_new(x509_object_hash,x509_object_cmp);
                     ^
  203.   	ret->cache=1;
  204.   	ret->get_cert_methods=sk_X509_LOOKUP_new_null();

crypto/lhash/lhash.c:127:2: Assignment
    125.   	ret->comp=((c == NULL)?(int (*)())strcmp:c);
    126.   	ret->hash=((h == NULL)?(unsigned long (*)())lh_strhash:h);
    127.   	ret->num_nodes=MIN_NODES/2;
            ^
    128.   	ret->num_alloc_nodes=MIN_NODES;
    129.   	ret->p=0;

apps/x509.c:879:2: Call
877.   	BIO_free(out);
878.   	BIO_free(STDout);
879.   	X509_STORE_free(ctx);
        ^
880.   	X509_REQ_free(req);
881.   	X509_free(x);

crypto/x509/x509_lu.c:229:1: Parameter `vfy->certs->num_nodes`
  227.   	}
  228.   
  229. > void X509_STORE_free(X509_STORE *vfy)
  230.   	{
  231.   	int i;

crypto/x509/x509_lu.c:248:2: Call
  246.   
  247.   	CRYPTO_free_ex_data(x509_store_meth,vfy,&vfy->ex_data);
  248.   	lh_doall(vfy->certs,cleanup);
          ^
  249.   	lh_free(vfy->certs);
  250.   	Free(vfy);

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
    268.   	}
    269.   
    270. > void lh_doall(LHASH *lh, void (*func)())
    271.   	{
    272.   	lh_doall_arg(lh,func,NULL);

crypto/lhash/lhash.c:272:2: Call
    270.   void lh_doall(LHASH *lh, void (*func)())
    271.   	{
    272.   	lh_doall_arg(lh,func,NULL);
            ^
    273.   	}
    274.   

crypto/lhash/lhash.c:275:1: <LHS trace>
273.   	}
274.   
275. > void lh_doall_arg(LHASH *lh, void (*func)(), void *arg)
276.   	{
277.   	int i;

crypto/lhash/lhash.c:275:1: Parameter `lh->num_nodes`
      273.   	}
      274.   
      275. > void lh_doall_arg(LHASH *lh, void (*func)(), void *arg)
      276.   	{
      277.   	int i;

crypto/lhash/lhash.c:282:7: Binary operation: ([0, 10] - 1):unsigned32 by call to `X509_STORE_free` 
      280.   	/* reverse the order so we search from 'top to bottom'
      281.   	 * We were having memory leaks otherwise */
      282.   	for (i=lh->num_nodes-1; i>=0; i--)
                   ^
      283.   		{
      284.   		a=lh->b[i];
