ssl/record/rec_layer_s3.c:1333: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `SSL_CTX_remove_session`.
Showing all 11 steps of the trace


ssl/record/rec_layer_s3.c:967:1: Parameter `s->ctx->sessions->num_items`
965.    *             none of our business
966.    */
967. > int ssl3_read_bytes(SSL *s, int type, int *recvd_type, unsigned char *buf,
968.                       int len, int peek)
969.   {

ssl/record/rec_layer_s3.c:1333:13: Call
1331.               ERR_add_error_data(2, "SSL alert number ", tmp);
1332.               s->shutdown |= SSL_RECEIVED_SHUTDOWN;
1333.               SSL_CTX_remove_session(s->ctx, s->session);
                    ^
1334.               return (0);
1335.           } else {

ssl/ssl_sess.c:776:1: Parameter `ctx->sessions->num_items`
  774.   }
  775.   
  776. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  777.   {
  778.       return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:778:12: Call
  776.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  777.   {
  778.       return remove_session_lock(ctx, c, 1);
                    ^
  779.   }
  780.   

ssl/ssl_sess.c:781:1: Parameter `ctx->sessions->num_items`
    779.   }
    780.   
    781. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
    782.   {
    783.       SSL_SESSION *r;

ssl/ssl_sess.c:791:17: Call
    789.           if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) == c) {
    790.               ret = 1;
    791.               r = lh_SSL_SESSION_delete(ctx->sessions, c);
                           ^
    792.               SSL_SESSION_list_remove(ctx, c);
    793.           }

ssl/ssl_locl.h:681:1: Parameter `lh->num_items`
      679.   };
      680.   
      681. > DEFINE_LHASH_OF(SSL_SESSION);
      682.   /* Needed in ssl_cert.c */
      683.   DEFINE_LHASH_OF(X509_NAME);

ssl/ssl_locl.h:681:1: Call
      679.   };
      680.   
      681. > DEFINE_LHASH_OF(SSL_SESSION);
      682.   /* Needed in ssl_cert.c */
      683.   DEFINE_LHASH_OF(X509_NAME);

crypto/lhash/lhash.c:188:1: <LHS trace>
186.   }
187.   
188. > void *lh_delete(_LHASH *lh, const void *data)
189.   {
190.       unsigned long hash;

crypto/lhash/lhash.c:188:1: Parameter `lh->num_items`
        186.   }
        187.   
        188. > void *lh_delete(_LHASH *lh, const void *data)
        189.   {
        190.       unsigned long hash;

crypto/lhash/lhash.c:208:5: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `SSL_CTX_remove_session` 
        206.       }
        207.   
        208.       lh->num_items--;
                   ^
        209.       if ((lh->num_nodes > MIN_NODES) &&
        210.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
