crypto/x509/by_dir.c:319: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `X509_load_crl_file`.
Showing all 11 steps of the trace


crypto/x509/by_dir.c:240:1: Parameter `xl->store_ctx->certs->num_items`
238.   	}
239.   
240. > static int get_cert_by_subject(X509_LOOKUP *xl, int type, X509_NAME *name,
241.   	     X509_OBJECT *ret)
242.   	{

crypto/x509/by_dir.c:319:10: Call
317.   			else if (type == X509_LU_CRL)
318.   				{
319.   				if ((X509_load_crl_file(xl,b->data,
                ^
320.   					ctx->dirs_type[i])) == 0)
321.   					break;

crypto/x509/by_file.c:195:1: Parameter `ctx->store_ctx->certs->num_items`
  193.   	}
  194.   
  195. > int X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type)
  196.   	{
  197.   	int ret=0;

crypto/x509/by_file.c:247:5: Call
  245.   			goto err;
  246.   			}
  247.   		i=X509_STORE_add_crl(ctx->store_ctx,x);
             ^
  248.   		if (!i) goto err;
  249.   		ret=i;

crypto/x509/x509_vfy.c:641:1: Parameter `ctx->certs->num_items`
    639.   	}
    640.   
    641. > int X509_STORE_add_crl(X509_STORE *ctx, X509_CRL *x)
    642.   	{
    643.   	X509_OBJECT *obj,*r;

crypto/x509/x509_vfy.c:660:19: Call
    658.   	X509_OBJECT_up_ref_count(obj);
    659.   
    660.   	r=(X509_OBJECT *)lh_insert(ctx->certs,obj);
                             ^
    661.   	if (r != NULL)
    662.   		{ /* oops, put it back */

crypto/lhash/lhash.c:179:1: Parameter `lh->num_items`
      177.   	}
      178.   
      179. > void *lh_insert(LHASH *lh, void *data)
      180.   	{
      181.   	unsigned long hash;

crypto/x509/x509_vfy.c:663:3: Call
    661.   	if (r != NULL)
    662.   		{ /* oops, put it back */
    663.   		lh_delete(ctx->certs,obj);
             ^
    664.   		X509_OBJECT_free_contents(obj);
    665.   		Free(obj);

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(LHASH *lh, void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
      215.   	}
      216.   
      217. > void *lh_delete(LHASH *lh, void *data)
      218.   	{
      219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, +oo] - 1):unsigned64 by call to `X509_load_crl_file` 
      238.   		}
      239.   
      240.   	lh->num_items--;
              ^
      241.   	if ((lh->num_nodes > MIN_NODES) &&
      242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
