ssl/ssl_lib.c:3580: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_nodes`)] - 1):unsigned32 by call to `SSL_free`.
Showing all 17 steps of the trace


ssl/ssl_lib.c:3457:1: Parameter `s->ctx->sessions->num_nodes`
3455.   }
3456.   
3457. > SSL *SSL_dup(SSL *s)
3458.   {
3459.       STACK_OF(X509_NAME) *sk;

ssl/ssl_lib.c:3473:16: Call
3471.        * Otherwise, copy configuration state, and session if set.
3472.        */
3473.       if ((ret = SSL_new(SSL_get_SSL_CTX(s))) == NULL)
                       ^
3474.           return NULL;
3475.   

ssl/ssl_lib.c:610:1: Parameter `ctx->sessions->num_nodes`
  608.   }
  609.   
  610. > SSL *SSL_new(SSL_CTX *ctx)
  611.   {
  612.       SSL *s;

ssl/ssl_lib.c:3580:5: Call
3578.   
3579.    err:
3580.       SSL_free(ret);
            ^
3581.       return NULL;
3582.   }

ssl/ssl_lib.c:1073:1: Parameter `s->ctx->sessions->num_nodes`
  1071.   }
  1072.   
  1073. > void SSL_free(SSL *s)
  1074.   {
  1075.       int i;

ssl/ssl_lib.c:1143:5: Call
  1141.       RECORD_LAYER_release(&s->rlayer);
  1142.   
  1143.       SSL_CTX_free(s->ctx);
              ^
  1144.   
  1145.       ASYNC_WAIT_CTX_free(s->waitctx);

ssl/ssl_lib.c:2914:1: Parameter `a->sessions->num_nodes`
    2912.   }
    2913.   
    2914. > void SSL_CTX_free(SSL_CTX *a)
    2915.   {
    2916.       int i;

ssl/ssl_lib.c:2940:9: Call
    2938.        */
    2939.       if (a->sessions != NULL)
    2940.           SSL_CTX_flush_sessions(a, 0);
                    ^
    2941.   
    2942.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1089:1: Parameter `s->sessions->num_nodes`
      1087.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1088.   
      1089. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      1090.   {
      1091.       unsigned long i;

ssl/ssl_sess.c:1102:5: Call
      1100.       i = lh_SSL_SESSION_get_down_load(s->sessions);
      1101.       lh_SSL_SESSION_set_down_load(s->sessions, 0);
      1102.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                  ^
      1103.       lh_SSL_SESSION_set_down_load(s->sessions, i);
      1104.       CRYPTO_THREAD_unlock(s->lock);

ssl/ssl_sess.c:1087:1: Parameter `lh->num_nodes`
        1085.   }
        1086.   
        1087. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1088.   
        1089.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1087:1: Call
        1085.   }
        1086.   
        1087. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1088.   
        1089.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:181:1: Parameter `lh->num_nodes`
          179.   }
          180.   
          181. > void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          182.   {
          183.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);

crypto/lhash/lhash.c:183:5: Call
          181.   void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          182.   {
          183.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);
                     ^
          184.   }
          185.   

crypto/lhash/lhash.c:149:1: <LHS trace>
147.   }
148.   
149. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
150.                             OPENSSL_LH_DOALL_FUNC func,
151.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:149:1: Parameter `lh->num_nodes`
            147.   }
            148.   
            149. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
            150.                             OPENSSL_LH_DOALL_FUNC func,
            151.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:163:10: Binary operation: ([0, max(0, s->ctx->sessions->num_nodes)] - 1):unsigned32 by call to `SSL_free` 
            161.        * memory leaks otherwise
            162.        */
            163.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                            ^
            164.           a = lh->b[i];
            165.           while (a != NULL) {
