ssl/ssl_lib.c:1546: error: INTEGER_OVERFLOW_L2
  ([0, `s->ctx->sessions->num_nodes` + 1] - 1):unsigned32 by call to `SSL_CTX_flush_sessions`.
Showing all 9 steps of the trace


ssl/ssl_lib.c:1519:1: Parameter `s->ctx->sessions->num_nodes`
1517.   	}
1518.   
1519. > void ssl_update_cache(SSL *s,int mode)
1520.   	{
1521.   	int i;

ssl/ssl_lib.c:1546:4: Call
1544.   			:s->ctx->stats.sess_accept_good) & 0xff) == 0xff)
1545.   			{
1546.   			SSL_CTX_flush_sessions(s->ctx,time(NULL));
           ^
1547.   			}
1548.   		}

ssl/ssl_sess.c:654:1: Parameter `s->sessions->num_nodes`
  652.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION *, TIMEOUT_PARAM *)
  653.   
  654. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
  655.   	{
  656.   	unsigned long i;

ssl/ssl_sess.c:666:2: Call
  664.   	i=tp.cache->down_load;
  665.   	tp.cache->down_load=0;
  666.   	lh_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout), &tp);
          ^
  667.   	tp.cache->down_load=i;
  668.   	CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

crypto/lhash/lhash.c:300:1: Parameter `lh->num_nodes`
    298.   	}
    299.   
    300. > void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
    301.   	{
    302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:302:2: Call
    300.   void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
    301.   	{
    302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
            ^
    303.   	}
    304.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
      268.   	}
      269.   
      270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
      271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
      272.   	{

crypto/lhash/lhash.c:278:7: Binary operation: ([0, s->ctx->sessions->num_nodes + 1] - 1):unsigned32 by call to `SSL_CTX_flush_sessions` 
      276.   	/* reverse the order so we search from 'top to bottom'
      277.   	 * We were having memory leaks otherwise */
      278.   	for (i=lh->num_nodes-1; i>=0; i--)
                   ^
      279.   		{
      280.   		a=lh->b[i];
