ssl/d1_srvr.c:269: error: INTEGER_OVERFLOW_L2
  ([0, `s->ctx->sessions->num_items`] - 1):unsigned64 by call to `ssl3_get_client_hello`.
Showing all 13 steps of the trace


ssl/d1_srvr.c:145:1: Parameter `s->ctx->sessions->num_items`
143.   			dtls1_get_server_method)
144.   
145. > int dtls1_accept(SSL *s)
146.   	{
147.   	BUF_MEM *buf;

ssl/d1_srvr.c:269:8: Call
267.   
268.   			s->shutdown=0;
269.   			ret=ssl3_get_client_hello(s);
              ^
270.   			if (ret <= 0) goto end;
271.   			s->new_session = 2;

ssl/s3_srvr.c:662:1: Parameter `s->ctx->sessions->num_items`
  660.   }
  661.   
  662. > int ssl3_get_client_hello(SSL *s)
  663.   	{
  664.   	int i,j,ok,al,ret= -1;

ssl/s3_srvr.c:1024:3: Call
  1022.   		{
  1023.   f_err:
  1024.   		ssl3_send_alert(s,SSL3_AL_FATAL,al);
            ^
  1025.   		}
  1026.   err:

ssl/s3_pkt.c:1269:1: Parameter `s->ctx->sessions->num_items`
    1267.   	}
    1268.   
    1269. > void ssl3_send_alert(SSL *s, int level, int desc)
    1270.   	{
    1271.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1278:3: Call
    1276.   	/* If a fatal one, remove from cache */
    1277.   	if ((level == 2) && (s->session != NULL))
    1278.   		SSL_CTX_remove_session(s->ctx,s->session);
              ^
    1279.   
    1280.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:552:1: Parameter `ctx->sessions->num_items`
      550.   	}
      551.   
      552. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      553.   {
      554.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:554:9: Call
      552.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      553.   {
      554.   	return remove_session_lock(ctx, c, 1);
                     ^
      555.   }
      556.   

ssl/ssl_sess.c:557:1: Parameter `ctx->sessions->num_items`
        555.   }
        556.   
        557. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
        558.   	{
        559.   	SSL_SESSION *r;

ssl/ssl_sess.c:568:21: Call
        566.   			{
        567.   			ret=1;
        568.   			r=(SSL_SESSION *)lh_delete(ctx->sessions,c);
                                   ^
        569.   			SSL_SESSION_list_remove(ctx,c);
        570.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
          215.   	}
          216.   
          217. > void *lh_delete(LHASH *lh, const void *data)
          218.   	{
          219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, s->ctx->sessions->num_items] - 1):unsigned64 by call to `ssl3_get_client_hello` 
          238.   		}
          239.   
          240.   	lh->num_items--;
                  ^
          241.   	if ((lh->num_nodes > MIN_NODES) &&
          242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
