apps/req.c:387: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `CONF_load`.
Showing all 8 steps of the trace


apps/req.c:387:12: Call
385.   
386.   		BIO_printf(bio_err,"Using configuration from %s\n",template);
387.   		req_conf=CONF_load(NULL,template,&errline);
                  ^
388.   		if (req_conf == NULL)
389.   			{

crypto/conf/conf.c:100:1: Parameter `h->num_nodes`
  98.   const char *CONF_version="CONF" OPENSSL_VERSION_PTEXT;
  99.   
  100. > LHASH *CONF_load(LHASH *h, char *file, long *line)
  101.   	{
  102.   	LHASH *ret=NULL;

crypto/conf/conf.c:342:35: Call
  340.   	ERR_add_error_data(2,"line ",btmp);
  341.   	if (in != NULL) fclose(in);
  342.   	if ((h != ret) && (ret != NULL)) CONF_free(ret);
                                           ^
  343.   	if (v != NULL)
  344.   		{

crypto/conf/conf.c:423:1: Parameter `conf->num_nodes`
    421.   	}
    422.   
    423. > void CONF_free(LHASH *conf)
    424.   	{
    425.   	if (conf == NULL) return;

crypto/conf/conf.c:429:2: Call
    427.   	conf->down_load=0; 	/* evil thing to make sure the 'Free()'
    428.   				 * works as expected */
    429.   	lh_doall_arg(conf,(void (*)())value_free_hash,(char *)conf);
            ^
    430.   
    431.   	/* We now have only 'section' entries in the hash table.

crypto/lhash/lhash.c:289:1: <LHS trace>
287.   	}
288.   
289. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
290.   	{
291.   	int i;

crypto/lhash/lhash.c:289:1: Parameter `lh->num_nodes`
      287.   	}
      288.   
      289. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
      290.   	{
      291.   	int i;

crypto/lhash/lhash.c:296:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `CONF_load` 
      294.   	/* reverse the order so we search from 'top to bottom'
      295.   	 * We were having memory leaks otherwise */
      296.   	for (i=lh->num_nodes-1; i>=0; i--)
                   ^
      297.   		{
      298.   		a=lh->b[i];
