ssl/ssl_lib.c:499: error: INTEGER_OVERFLOW_L2
  ([0, `s->ctx->sessions->num_nodes`] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 11 steps of the trace


ssl/ssl_lib.c:441:1: Parameter `s->ctx->sessions->num_nodes`
439.   	}
440.   
441. > void SSL_free(SSL *s)
442.   	{
443.   	int i;

ssl/ssl_lib.c:499:14: Call
497.   	/* Free up if allocated */
498.   
499.   	if (s->ctx) SSL_CTX_free(s->ctx);
                    ^
500.   #ifndef OPENSSL_NO_TLSEXT
501.   	if (s->initial_ctx) SSL_CTX_free(s->initial_ctx);

ssl/ssl_lib.c:1517:1: Parameter `a->sessions->num_nodes`
  1515.   #endif
  1516.   
  1517. > void SSL_CTX_free(SSL_CTX *a)
  1518.   	{
  1519.   	int i;

ssl/ssl_lib.c:1549:3: Call
  1547.   	 */
  1548.   	if (a->sessions != NULL)
  1549.   		SSL_CTX_flush_sessions(a,0);
            ^
  1550.   
  1551.   	CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:752:1: Parameter `s->sessions->num_nodes`
    750.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION *, TIMEOUT_PARAM *)
    751.   
    752. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    753.   	{
    754.   	unsigned long i;

ssl/ssl_sess.c:764:2: Call
    762.   	i=tp.cache->down_load;
    763.   	tp.cache->down_load=0;
    764.   	lh_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout), &tp);
            ^
    765.   	tp.cache->down_load=i;
    766.   	CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

crypto/lhash/lhash.c:300:1: Parameter `lh->num_nodes`
      298.   	}
      299.   
      300. > void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      301.   	{
      302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:302:2: Call
      300.   void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      301.   	{
      302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
              ^
      303.   	}
      304.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
        268.   	}
        269.   
        270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
        271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
        272.   	{

crypto/lhash/lhash.c:278:7: Binary operation: ([0, s->ctx->sessions->num_nodes] - 1):unsigned32 by call to `SSL_CTX_free` 
        276.   	/* reverse the order so we search from 'top to bottom'
        277.   	 * We were having memory leaks otherwise */
        278.   	for (i=lh->num_nodes-1; i>=0; i--)
                     ^
        279.   		{
        280.   		a=lh->b[i];
