apps/s_time.c:311: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_free`.
Showing all 15 steps of the trace


apps/s_time.c:249:16: Call
247.       }
248.   
249.       if ((ctx = SSL_CTX_new(meth)) == NULL)
                      ^
250.           goto end;
251.   

ssl/ssl_lib.c:2277:21: Call
  2275.           goto err;
  2276.   
  2277.       ret->sessions = lh_SSL_SESSION_new();
                              ^
  2278.       if (ret->sessions == NULL)
  2279.           goto err;

crypto/lhash/lhash.c:123:5: Assignment
    121.       ret->comp = ((c == NULL) ? (LHASH_COMP_FN_TYPE)strcmp : c);
    122.       ret->hash = ((h == NULL) ? (LHASH_HASH_FN_TYPE)lh_strhash : h);
    123.       ret->num_nodes = MIN_NODES / 2;
               ^
    124.       ret->num_alloc_nodes = MIN_NODES;
    125.       ret->pmax = MIN_NODES / 2;

apps/s_time.c:311:9: Call
309.           fflush(stdout);
310.   
311.           SSL_free(scon);
               ^
312.           scon = NULL;
313.       }

ssl/ssl_lib.c:977:1: Parameter `s->initial_ctx->sessions->num_nodes`
  975.   }
  976.   
  977. > void SSL_free(SSL *s)
  978.   {
  979.       int i;

ssl/ssl_lib.c:1031:5: Call
  1029.   
  1030.       OPENSSL_free(s->tlsext_hostname);
  1031.       SSL_CTX_free(s->initial_ctx);
              ^
  1032.   #ifndef OPENSSL_NO_EC
  1033.       OPENSSL_free(s->tlsext_ecpointformatlist);

ssl/ssl_lib.c:2358:1: Parameter `a->sessions->num_nodes`
    2356.   }
    2357.   
    2358. > void SSL_CTX_free(SSL_CTX *a)
    2359.   {
    2360.       int i;

ssl/ssl_lib.c:2391:9: Call
    2389.        */
    2390.       if (a->sessions != NULL)
    2391.           SSL_CTX_flush_sessions(a, 0);
                    ^
    2392.   
    2393.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1065:1: Parameter `s->sessions->num_nodes`
      1063.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
      1064.   
      1065. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      1066.   {
      1067.       unsigned long i;

ssl/ssl_sess.c:1078:5: Call
      1076.       i = CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
      1077.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = 0;
      1078.       lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
                  ^
      1079.                                TIMEOUT_PARAM, &tp);
      1080.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = i;

crypto/lhash/lhash.c:274:1: Parameter `lh->num_nodes`
        272.   }
        273.   
        274. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
        275.   {
        276.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:276:5: Call
        274.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
        275.   {
        276.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                   ^
        277.   }
        278.   

crypto/lhash/lhash.c:236:1: <LHS trace>
234.   }
235.   
236. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
237.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
238.   {

crypto/lhash/lhash.c:236:1: Parameter `lh->num_nodes`
          234.   }
          235.   
          236. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
          237.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
          238.   {

crypto/lhash/lhash.c:249:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_free` 
          247.        * memory leaks otherwise
          248.        */
          249.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                          ^
          250.           a = lh->b[i];
          251.           while (a != NULL) {
