apps/x509.c:721: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `CONF_free`.
Showing all 8 steps of the trace


apps/x509.c:327:17: Call
325.   		long errorline;
326.   		X509V3_CTX ctx2;
327.   		if (!(extconf=CONF_load(NULL,extfile,&errorline))) {
                       ^
328.   			if (errorline <= 0)
329.   				BIO_printf(bio_err,

crypto/conf/conf.c:86:1: Parameter `h->num_nodes`
  84.   
  85.   
  86. > LHASH *CONF_load(LHASH *h, const char *file, long *line)
  87.   	{
  88.   	LHASH *ltmp;

apps/x509.c:721:2: Call
719.   end:
720.   	OBJ_cleanup();
721.   	CONF_free(extconf);
        ^
722.   	BIO_free(out);
723.   	BIO_free(STDout);

crypto/conf/conf.c:442:1: Parameter `conf->num_nodes`
  440.   	}
  441.   
  442. > void CONF_free(LHASH *conf)
  443.   	{
  444.   	if (conf == NULL) return;

crypto/conf/conf.c:448:2: Call
  446.   	conf->down_load=0; 	/* evil thing to make sure the 'Free()'
  447.   				 * works as expected */
  448.   	lh_doall_arg(conf,(void (*)())value_free_hash,(char *)conf);
          ^
  449.   
  450.   	/* We now have only 'section' entries in the hash table.

crypto/lhash/lhash.c:278:1: <LHS trace>
276.   	}
277.   
278. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
279.   	{
280.   	int i;

crypto/lhash/lhash.c:278:1: Parameter `lh->num_nodes`
    276.   	}
    277.   
    278. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
    279.   	{
    280.   	int i;

crypto/lhash/lhash.c:285:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `CONF_free` 
    283.   	/* reverse the order so we search from 'top to bottom'
    284.   	 * We were having memory leaks otherwise */
    285.   	for (i=lh->num_nodes-1; i>=0; i--)
                 ^
    286.   		{
    287.   		a=lh->b[i];
