apps/ocsp.c:1300: error: INTEGER_OVERFLOW_L2
  ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 16 steps of the trace


apps/ocsp.c:1285:15: Call
1283.       if (use_ssl == 1) {
1284.           BIO *sbio;
1285.           ctx = SSL_CTX_new(TLS_client_method());
                      ^
1286.           if (ctx == NULL) {
1287.               BIO_printf(bio_err, "Error creating SSL context.\n");

ssl/ssl_lib.c:2394:21: Call
  2392.           goto err;
  2393.   
  2394.       ret->sessions = lh_SSL_SESSION_new(ssl_session_hash, ssl_session_cmp);
                              ^
  2395.       if (ret->sessions == NULL)
  2396.           goto err;

ssl/ssl_locl.h:684:1: Call
    682.   };
    683.   
    684. > DEFINE_LHASH_OF(SSL_SESSION);
    685.   /* Needed in ssl_cert.c */
    686.   DEFINE_LHASH_OF(X509_NAME);

crypto/lhash/lhash.c:122:5: Assignment
      120.       ret->comp = ((c == NULL) ? (LHASH_COMP_FN_TYPE)strcmp : c);
      121.       ret->hash = ((h == NULL) ? (LHASH_HASH_FN_TYPE)lh_strhash : h);
      122.       ret->num_nodes = MIN_NODES / 2;
                 ^
      123.       ret->num_alloc_nodes = MIN_NODES;
      124.       ret->pmax = MIN_NODES / 2;

apps/ocsp.c:1300:5: Call
1298.    end:
1299.       BIO_free_all(cbio);
1300.       SSL_CTX_free(ctx);
            ^
1301.       return resp;
1302.   }

ssl/ssl_lib.c:2493:1: Parameter `a->sessions->num_nodes`
  2491.   }
  2492.   
  2493. > void SSL_CTX_free(SSL_CTX *a)
  2494.   {
  2495.       int i;

ssl/ssl_lib.c:2519:9: Call
  2517.        */
  2518.       if (a->sessions != NULL)
  2519.           SSL_CTX_flush_sessions(a, 0);
                  ^
  2520.   
  2521.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1074:1: Parameter `s->sessions->num_nodes`
    1072.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
    1073.   
    1074. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    1075.   {
    1076.       unsigned long i;

ssl/ssl_sess.c:1087:5: Call
    1085.       i = CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
    1086.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = 0;
    1087.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                ^
    1088.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = i;
    1089.       CRYPTO_THREAD_unlock(s->lock);

ssl/ssl_sess.c:1072:1: Parameter `lh->num_nodes`
      1070.   }
      1071.   
      1072. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1073.   
      1074.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1072:1: Call
      1070.   }
      1071.   
      1072. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1073.   
      1074.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:273:1: Parameter `lh->num_nodes`
        271.   }
        272.   
        273. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
        274.   {
        275.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:275:5: Call
        273.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
        274.   {
        275.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                   ^
        276.   }
        277.   

crypto/lhash/lhash.c:235:1: <LHS trace>
233.   }
234.   
235. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
236.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
237.   {

crypto/lhash/lhash.c:235:1: Parameter `lh->num_nodes`
          233.   }
          234.   
          235. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
          236.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
          237.   {

crypto/lhash/lhash.c:248:10: Binary operation: ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free` 
          246.        * memory leaks otherwise
          247.        */
          248.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                          ^
          249.           a = lh->b[i];
          250.           while (a != NULL) {
