ssl/ssl_sess.c:474: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `remove_session_lock`.
Showing all 10 steps of the trace


ssl/ssl_sess.c:433:19: Call
431.   
432.   	CRYPTO_w_lock(CRYPTO_LOCK_SSL_CTX);
433.   	s=(SSL_SESSION *)lh_insert(ctx->sessions,c);
                         ^
434.   	
435.   	/* s != NULL iff we already had a session with the given PID.

crypto/lhash/lhash.c:179:1: Parameter `lh->pmax`
  177.   	}
  178.   
  179. > void *lh_insert(LHASH *lh, void *data)
  180.   	{
  181.   	unsigned long hash;

ssl/ssl_sess.c:474:10: Call
472.   				SSL_CTX_sess_get_cache_size(ctx))
473.   				{
474.   				if (!remove_session_lock(ctx,
                ^
475.   					ctx->session_cache_tail, 0))
476.   					break;

ssl/ssl_sess.c:491:1: Parameter `ctx->sessions->pmax`
  489.   }
  490.   
  491. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
  492.   	{
  493.   	SSL_SESSION *r;

ssl/ssl_sess.c:502:21: Call
  500.   			{
  501.   			ret=1;
  502.   			r=(SSL_SESSION *)lh_delete(ctx->sessions,c);
                             ^
  503.   			SSL_SESSION_list_remove(ctx,c);
  504.   			}

crypto/lhash/lhash.c:217:1: Parameter `lh->pmax`
    215.   	}
    216.   
    217. > void *lh_delete(LHASH *lh, const void *data)
    218.   	{
    219.   	unsigned long hash;

crypto/lhash/lhash.c:243:3: Call
    241.   	if ((lh->num_nodes > MIN_NODES) &&
    242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
    243.   		contract(lh);
             ^
    244.   
    245.   	return(ret);

crypto/lhash/lhash.c:361:1: <LHS trace>
359.   	}
360.   
361. > static void contract(LHASH *lh)
362.   	{
363.   	LHASH_NODE **n,*n1,*np;

crypto/lhash/lhash.c:361:1: Parameter `lh->p`
      359.   	}
      360.   
      361. > static void contract(LHASH *lh)
      362.   	{
      363.   	LHASH_NODE **n,*n1,*np;

crypto/lhash/lhash.c:365:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `remove_session_lock` 
      363.   	LHASH_NODE **n,*n1,*np;
      364.   
      365.   	np=lh->b[lh->p+lh->pmax-1];
                 ^
      366.   	lh->b[lh->p+lh->pmax-1]=NULL; /* 24/07-92 - eay - weird but :-( */
      367.   	if (lh->p == 0)
