ssl/ssl_lib.c:380: error: INTEGER_OVERFLOW_L2
  ([0, `s->ctx->sessions->num_nodes`] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 9 steps of the trace


ssl/ssl_lib.c:325:1: Parameter `s->ctx->sessions->num_nodes`
323.   }
324.   
325. > void SSL_free(SSL *s)
326.   	{
327.   	int i;

ssl/ssl_lib.c:380:14: Call
378.   	/* Free up if allocated */
379.   
380.   	if (s->ctx) SSL_CTX_free(s->ctx);
                    ^
381.   
382.   	if (s->client_CA != NULL)

ssl/ssl_lib.c:1227:1: Parameter `a->sessions->num_nodes`
  1225.   #endif
  1226.   
  1227. > void SSL_CTX_free(SSL_CTX *a)
  1228.   	{
  1229.   	int i;

ssl/ssl_lib.c:1249:3: Call
  1247.   	if (a->sessions != NULL)
  1248.   		{
  1249.   		SSL_CTX_flush_sessions(a,0);
            ^
  1250.   		lh_free(a->sessions);
  1251.   		}

ssl/ssl_sess.c:597:1: Parameter `s->sessions->num_nodes`
    595.   	}
    596.   
    597. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    598.   	{
    599.   	unsigned long i;

ssl/ssl_sess.c:609:2: Call
    607.   	i=tp.cache->down_load;
    608.   	tp.cache->down_load=0;
    609.   	lh_doall_arg(tp.cache, (LHASH_DOALL_ARG_FN_TYPE)timeout, &tp);
            ^
    610.   	tp.cache->down_load=i;
    611.   	CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

crypto/lhash/lhash.c:282:1: <LHS trace>
280.   	}
281.   
282. > void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, const void *arg)
283.   	{
284.   	int i;

crypto/lhash/lhash.c:282:1: Parameter `lh->num_nodes`
      280.   	}
      281.   
      282. > void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, const void *arg)
      283.   	{
      284.   	int i;

crypto/lhash/lhash.c:289:7: Binary operation: ([0, s->ctx->sessions->num_nodes] - 1):unsigned32 by call to `SSL_CTX_free` 
      287.   	/* reverse the order so we search from 'top to bottom'
      288.   	 * We were having memory leaks otherwise */
      289.   	for (i=lh->num_nodes-1; i>=0; i--)
                   ^
      290.   		{
      291.   		a=lh->b[i];
