ssl/ssl_lib.c:767: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `ctx->sessions->num_items`)] - 1):unsigned64 by call to `SSL_free`.
Showing all 15 steps of the trace


ssl/ssl_lib.c:617:1: Parameter `ctx->sessions->num_items`
615.   }
616.   
617. > SSL *SSL_new(SSL_CTX *ctx)
618.   {
619.       SSL *s;

ssl/ssl_lib.c:767:5: Call
765.       return s;
766.    err:
767.       SSL_free(s);
           ^
768.       SSLerr(SSL_F_SSL_NEW, ERR_R_MALLOC_FAILURE);
769.       return NULL;

ssl/ssl_lib.c:1013:1: Parameter `s->ctx->sessions->num_items`
  1011.   }
  1012.   
  1013. > void SSL_free(SSL *s)
  1014.   {
  1015.       int i;

ssl/ssl_lib.c:1050:9: Call
  1048.       /* Make the next call work :-) */
  1049.       if (s->session != NULL) {
  1050.           ssl_clear_bad_session(s);
                  ^
  1051.           SSL_SESSION_free(s->session);
  1052.       }

ssl/ssl_sess.c:1092:1: Parameter `s->ctx->sessions->num_items`
    1090.   }
    1091.   
    1092. > int ssl_clear_bad_session(SSL *s)
    1093.   {
    1094.       if ((s->session != NULL) &&

ssl/ssl_sess.c:1097:9: Call
    1095.           !(s->shutdown & SSL_SENT_SHUTDOWN) &&
    1096.           !(SSL_in_init(s) || SSL_in_before(s))) {
    1097.           SSL_CTX_remove_session(s->ctx, s->session);
                    ^
    1098.           return (1);
    1099.       } else

ssl/ssl_sess.c:790:1: Parameter `ctx->sessions->num_items`
      788.   }
      789.   
      790. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      791.   {
      792.       return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:792:12: Call
      790.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
      791.   {
      792.       return remove_session_lock(ctx, c, 1);
                        ^
      793.   }
      794.   

ssl/ssl_sess.c:795:1: Parameter `ctx->sessions->num_items`
        793.   }
        794.   
        795. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
        796.   {
        797.       SSL_SESSION *r;

ssl/ssl_sess.c:805:17: Call
        803.           if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) == c) {
        804.               ret = 1;
        805.               r = lh_SSL_SESSION_delete(ctx->sessions, c);
                               ^
        806.               SSL_SESSION_list_remove(ctx, c);
        807.           }

ssl/ssl_locl.h:684:1: Parameter `lh->num_items`
          682.   };
          683.   
          684. > DEFINE_LHASH_OF(SSL_SESSION);
          685.   /* Needed in ssl_cert.c */
          686.   DEFINE_LHASH_OF(X509_NAME);

ssl/ssl_locl.h:684:1: Call
          682.   };
          683.   
          684. > DEFINE_LHASH_OF(SSL_SESSION);
          685.   /* Needed in ssl_cert.c */
          686.   DEFINE_LHASH_OF(X509_NAME);

crypto/lhash/lhash.c:188:1: <LHS trace>
186.   }
187.   
188. > void *lh_delete(_LHASH *lh, const void *data)
189.   {
190.       unsigned long hash;

crypto/lhash/lhash.c:188:1: Parameter `lh->num_items`
            186.   }
            187.   
            188. > void *lh_delete(_LHASH *lh, const void *data)
            189.   {
            190.       unsigned long hash;

crypto/lhash/lhash.c:208:5: Binary operation: ([0, max(0, ctx->sessions->num_items)] - 1):unsigned64 by call to `SSL_free` 
            206.       }
            207.   
            208.       lh->num_items--;
                       ^
            209.       if ((lh->num_nodes > MIN_NODES) &&
            210.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
