ssl/bio_ssl.c:448: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_dup`.
Showing all 18 steps of the trace


ssl/bio_ssl.c:447:4: Call
445.   		dbio=(BIO *)ptr;
446.   		if (((BIO_SSL *)dbio->ptr)->ssl != NULL)
447.   			SSL_free(((BIO_SSL *)dbio->ptr)->ssl);
          ^
448.   		((BIO_SSL *)dbio->ptr)->ssl=SSL_dup(ssl);
449.   		((BIO_SSL *)dbio->ptr)->renegotiate_count=

ssl/ssl_lib.c:537:1: Parameter `s->initial_ctx->sessions->num_nodes`
  535.   	}
  536.   
  537. > void SSL_free(SSL *s)
  538.   	{
  539.   	int i;

ssl/bio_ssl.c:448:31: Call
446.   		if (((BIO_SSL *)dbio->ptr)->ssl != NULL)
447.   			SSL_free(((BIO_SSL *)dbio->ptr)->ssl);
448.   		((BIO_SSL *)dbio->ptr)->ssl=SSL_dup(ssl);
                                     ^
449.   		((BIO_SSL *)dbio->ptr)->renegotiate_count=
450.   			((BIO_SSL *)b->ptr)->renegotiate_count;

ssl/ssl_lib.c:2848:1: Parameter `s->ctx->sessions->num_nodes`
  2846.   	}
  2847.   
  2848. > SSL *SSL_dup(SSL *s)
  2849.   	{
  2850.   	STACK_OF(X509_NAME) *sk;

ssl/ssl_lib.c:2855:11: Call
  2853.   	int i;
  2854.   	
  2855.   	if ((ret=SSL_new(SSL_get_SSL_CTX(s))) == NULL)
                    ^
  2856.   	    return(NULL);
  2857.   

ssl/ssl_lib.c:275:1: Parameter `ctx->sessions->num_nodes`
    273.   	}
    274.   
    275. > SSL *SSL_new(SSL_CTX *ctx)
    276.   	{
    277.   	SSL *s;

ssl/ssl_lib.c:420:3: Call
    418.   err:
    419.   	if (s != NULL)
    420.   		SSL_free(s);
             ^
    421.   	SSLerr(SSL_F_SSL_NEW,ERR_R_MALLOC_FAILURE);
    422.   	return(NULL);

ssl/ssl_lib.c:537:1: Parameter `s->initial_ctx->sessions->num_nodes`
      535.   	}
      536.   
      537. > void SSL_free(SSL *s)
      538.   	{
      539.   	int i;

ssl/ssl_lib.c:600:22: Call
      598.   	if (s->tlsext_hostname)
      599.   		OPENSSL_free(s->tlsext_hostname);
      600.   	if (s->initial_ctx) SSL_CTX_free(s->initial_ctx);
                                  ^
      601.   #ifndef OPENSSL_NO_EC
      602.   	if (s->tlsext_ecpointformatlist) OPENSSL_free(s->tlsext_ecpointformatlist);

ssl/ssl_lib.c:2090:1: Parameter `a->sessions->num_nodes`
        2088.   #endif
        2089.   
        2090. > void SSL_CTX_free(SSL_CTX *a)
        2091.   	{
        2092.   	int i;

ssl/ssl_lib.c:2122:3: Call
        2120.   	 */
        2121.   	if (a->sessions != NULL)
        2122.   		SSL_CTX_flush_sessions(a,0);
                  ^
        2123.   
        2124.   	CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:968:1: Parameter `s->sessions->num_nodes`
          966.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
          967.   
          968. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
          969.   	{
          970.   	unsigned long i;

ssl/ssl_sess.c:980:2: Call
          978.   	i=CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
          979.   	CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load=0;
          980.   	lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
                  ^
          981.   				 TIMEOUT_PARAM, &tp);
          982.   	CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load=i;

crypto/lhash/lhash.c:305:1: Parameter `lh->num_nodes`
            303.   	}
            304.   
            305. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
            306.   	{
            307.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:307:2: Call
            305.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
            306.   	{
            307.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                    ^
            308.   	}
            309.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
              268.   	}
              269.   
              270. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
              271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
              272.   	{

crypto/lhash/lhash.c:281:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_dup` 
              279.   	/* reverse the order so we search from 'top to bottom'
              280.   	 * We were having memory leaks otherwise */
              281.   	for (i=lh->num_nodes-1; i>=0; i--)
                           ^
              282.   		{
              283.   		a=lh->b[i];
