ssl/record/rec_layer_d1.c:743: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `SSL_CTX_remove_session`.
Showing all 11 steps of the trace


ssl/record/rec_layer_d1.c:298:1: Parameter `s->ctx->sessions->num_items`
296.    *             none of our business
297.    */
298. > int dtls1_read_bytes(SSL *s, int type, int *recvd_type, unsigned char *buf,
299.                        int len, int peek)
300.   {

ssl/record/rec_layer_d1.c:743:13: Call
741.               ERR_add_error_data(2, "SSL alert number ", tmp);
742.               s->shutdown |= SSL_RECEIVED_SHUTDOWN;
743.               SSL_CTX_remove_session(s->ctx, s->session);
                   ^
744.               return (0);
745.           } else {

ssl/ssl_sess.c:691:1: Parameter `ctx->sessions->num_items`
  689.   }
  690.   
  691. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  692.   {
  693.       return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:693:12: Call
  691.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  692.   {
  693.       return remove_session_lock(ctx, c, 1);
                    ^
  694.   }
  695.   

ssl/ssl_sess.c:696:1: Parameter `ctx->sessions->num_items`
    694.   }
    695.   
    696. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
    697.   {
    698.       SSL_SESSION *r;

ssl/ssl_sess.c:706:17: Call
    704.           if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) == c) {
    705.               ret = 1;
    706.               r = lh_SSL_SESSION_delete(ctx->sessions, c);
                           ^
    707.               SSL_SESSION_list_remove(ctx, c);
    708.           }

ssl/ssl_locl.h:581:1: Parameter `lh->num_items`
      579.   };
      580.   
      581. > DEFINE_LHASH_OF(SSL_SESSION);
      582.   /* Needed in ssl_cert.c */
      583.   DEFINE_LHASH_OF(X509_NAME);

ssl/ssl_locl.h:581:1: Call
      579.   };
      580.   
      581. > DEFINE_LHASH_OF(SSL_SESSION);
      582.   /* Needed in ssl_cert.c */
      583.   DEFINE_LHASH_OF(X509_NAME);

crypto/lhash/lhash.c:103:1: <LHS trace>
101.   }
102.   
103. > void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)
104.   {
105.       unsigned long hash;

crypto/lhash/lhash.c:103:1: Parameter `lh->num_items`
        101.   }
        102.   
        103. > void *OPENSSL_LH_delete(OPENSSL_LHASH *lh, const void *data)
        104.   {
        105.       unsigned long hash;

crypto/lhash/lhash.c:123:5: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `SSL_CTX_remove_session` 
        121.       }
        122.   
        123.       lh->num_items--;
                   ^
        124.       if ((lh->num_nodes > MIN_NODES) &&
        125.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
