ssl/d1_clnt.c:253: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `ssl3_get_server_hello`.
Showing all 15 steps of the trace


ssl/d1_clnt.c:144:1: Parameter `s->ctx->sessions->num_items`
142.   			dtls1_get_client_method)
143.   
144. > int dtls1_connect(SSL *s)
145.   	{
146.   	BUF_MEM *buf=NULL;

ssl/d1_clnt.c:253:8: Call
251.   		case SSL3_ST_CR_SRVR_HELLO_A:
252.   		case SSL3_ST_CR_SRVR_HELLO_B:
253.   			ret=ssl3_get_server_hello(s);
              ^
254.   			if (ret <= 0) goto end;
255.   			else

ssl/s3_clnt.c:716:1: Parameter `s->ctx->sessions->num_items`
  714.   	}
  715.   
  716. > int ssl3_get_server_hello(SSL *s)
  717.   	{
  718.   	STACK_OF(SSL_CIPHER) *sk;

ssl/s3_clnt.c:894:7: Call
  892.   			goto f_err; 
  893.   			}
  894.   		if (ssl_check_serverhello_tlsext(s) <= 0)
               ^
  895.   			{
  896.   			SSLerr(SSL_F_SSL3_GET_SERVER_HELLO,SSL_R_SERVERHELLO_TLSEXT);

ssl/t1_lib.c:1265:1: Parameter `s->ctx->sessions->num_items`
    1263.   	}
    1264.   
    1265. > int ssl_check_serverhello_tlsext(SSL *s)
    1266.   	{
    1267.   	int ret=SSL_TLSEXT_ERR_NOACK;

ssl/t1_lib.c:1366:4: Call
    1364.   		{
    1365.   		case SSL_TLSEXT_ERR_ALERT_FATAL:
    1366.   			ssl3_send_alert(s,SSL3_AL_FATAL,al); 
               ^
    1367.   			return -1;
    1368.   

ssl/s3_pkt.c:1317:1: Parameter `s->ctx->sessions->num_items`
      1315.   	}
      1316.   
      1317. > void ssl3_send_alert(SSL *s, int level, int desc)
      1318.   	{
      1319.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1326:3: Call
      1324.   	/* If a fatal one, remove from cache */
      1325.   	if ((level == 2) && (s->session != NULL))
      1326.   		SSL_CTX_remove_session(s->ctx,s->session);
                ^
      1327.   
      1328.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:645:1: Parameter `ctx->sessions->num_items`
        643.   	}
        644.   
        645. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        646.   {
        647.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:647:9: Call
        645.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        646.   {
        647.   	return remove_session_lock(ctx, c, 1);
                       ^
        648.   }
        649.   

ssl/ssl_sess.c:650:1: Parameter `ctx->sessions->num_items`
          648.   }
          649.   
          650. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
          651.   	{
          652.   	SSL_SESSION *r;

ssl/ssl_sess.c:661:6: Call
          659.   			{
          660.   			ret=1;
          661.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                      ^
          662.   			SSL_SESSION_list_remove(ctx,c);
          663.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(_LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
            215.   	}
            216.   
            217. > void *lh_delete(_LHASH *lh, const void *data)
            218.   	{
            219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `ssl3_get_server_hello` 
            238.   		}
            239.   
            240.   	lh->num_items--;
                    ^
            241.   	if ((lh->num_nodes > MIN_NODES) &&
            242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
