ssl/record/rec_layer_s3.c:1350: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `SSL_CTX_remove_session`.
Showing all 11 steps of the trace


ssl/record/rec_layer_s3.c:968:1: Parameter `s->ctx->sessions->num_items`
966.    *             none of our business
967.    */
968. > int ssl3_read_bytes(SSL *s, int type, int *recvd_type, unsigned char *buf,
969.                       int len, int peek)
970.   {

ssl/record/rec_layer_s3.c:1350:13: Call
1348.               ERR_add_error_data(2, "SSL alert number ", tmp);
1349.               s->shutdown |= SSL_RECEIVED_SHUTDOWN;
1350.               SSL_CTX_remove_session(s->ctx, s->session);
                    ^
1351.               return (0);
1352.           } else {

ssl/ssl_sess.c:785:1: Parameter `ctx->sessions->num_items`
  783.   }
  784.   
  785. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  786.   {
  787.       return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:787:12: Call
  785.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  786.   {
  787.       return remove_session_lock(ctx, c, 1);
                    ^
  788.   }
  789.   

ssl/ssl_sess.c:790:1: Parameter `ctx->sessions->num_items`
    788.   }
    789.   
    790. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
    791.   {
    792.       SSL_SESSION *r;

ssl/ssl_sess.c:800:17: Call
    798.           if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) == c) {
    799.               ret = 1;
    800.               r = lh_SSL_SESSION_delete(ctx->sessions, c);
                           ^
    801.               SSL_SESSION_list_remove(ctx, c);
    802.           }

ssl/ssl_locl.h:697:1: Parameter `lh->num_items`
      695.   
      696.   DEFINE_STACK_OF(SSL_COMP)
      697. > DEFINE_LHASH_OF(SSL_SESSION);
      698.   
      699.   

ssl/ssl_locl.h:697:1: Call
      695.   
      696.   DEFINE_STACK_OF(SSL_COMP)
      697. > DEFINE_LHASH_OF(SSL_SESSION);
      698.   
      699.   

crypto/lhash/lhash.c:189:1: <LHS trace>
187.   }
188.   
189. > void *lh_delete(_LHASH *lh, const void *data)
190.   {
191.       unsigned long hash;

crypto/lhash/lhash.c:189:1: Parameter `lh->num_items`
        187.   }
        188.   
        189. > void *lh_delete(_LHASH *lh, const void *data)
        190.   {
        191.       unsigned long hash;

crypto/lhash/lhash.c:209:5: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `SSL_CTX_remove_session` 
        207.       }
        208.   
        209.       lh->num_items--;
                   ^
        210.       if ((lh->num_nodes > MIN_NODES) &&
        211.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
