ssl/ssl_lib.c:2430: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `SSL_free`.
Showing all 15 steps of the trace


ssl/ssl_lib.c:2306:1: Parameter `s->ctx->sessions->num_items`
2304.   	}
2305.   
2306. > SSL *SSL_dup(SSL *s)
2307.   	{
2308.   	STACK_OF(X509_NAME) *sk;

ssl/ssl_lib.c:2313:11: Call
2311.   	int i;
2312.   	
2313.   	if ((ret=SSL_new(SSL_get_SSL_CTX(s))) == NULL)
                  ^
2314.   	    return(NULL);
2315.   

ssl/ssl_lib.c:268:1: Parameter `ctx->sessions->num_items`
  266.   	}
  267.   
  268. > SSL *SSL_new(SSL_CTX *ctx)
  269.   	{
  270.   	SSL *s;

ssl/ssl_lib.c:2430:20: Call
2428.   		{
2429.   err:
2430.   		if (ret != NULL) SSL_free(ret);
                           ^
2431.   		ret=NULL;
2432.   		}

ssl/ssl_lib.c:485:1: Parameter `s->ctx->sessions->num_items`
  483.   	}
  484.   
  485. > void SSL_free(SSL *s)
  486.   	{
  487.   	int i;

ssl/ssl_lib.c:534:3: Call
  532.   	if (s->session != NULL)
  533.   		{
  534.   		ssl_clear_bad_session(s);
           ^
  535.   		SSL_SESSION_free(s->session);
  536.   		}

ssl/ssl_sess.c:876:1: Parameter `s->ctx->sessions->num_items`
    874.   	}
    875.   
    876. > int ssl_clear_bad_session(SSL *s)
    877.   	{
    878.   	if (	(s->session != NULL) &&

ssl/ssl_sess.c:882:3: Call
    880.   		!(SSL_in_init(s) || SSL_in_before(s)))
    881.   		{
    882.   		SSL_CTX_remove_session(s->ctx,s->session);
             ^
    883.   		return(1);
    884.   		}

ssl/ssl_sess.c:645:1: Parameter `ctx->sessions->num_items`
      643.   	}
      644.   
      645. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      646.   {
      647.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:647:9: Call
      645.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      646.   {
      647.   	return remove_session_lock(ctx, c, 1);
                     ^
      648.   }
      649.   

ssl/ssl_sess.c:650:1: Parameter `ctx->sessions->num_items`
        648.   }
        649.   
        650. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
        651.   	{
        652.   	SSL_SESSION *r;

ssl/ssl_sess.c:661:6: Call
        659.   			{
        660.   			ret=1;
        661.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                    ^
        662.   			SSL_SESSION_list_remove(ctx,c);
        663.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(_LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
          215.   	}
          216.   
          217. > void *lh_delete(_LHASH *lh, const void *data)
          218.   	{
          219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `SSL_free` 
          238.   		}
          239.   
          240.   	lh->num_items--;
                  ^
          241.   	if ((lh->num_nodes > MIN_NODES) &&
          242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
