crypto/x509/by_dir.c:323: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned64 by call to `X509_load_crl_file`.
Showing all 11 steps of the trace


crypto/x509/by_dir.c:244:1: Parameter `xl->store_ctx->certs->num_items`
242.   	}
243.   
244. > static int get_cert_by_subject(X509_LOOKUP *xl, int type, X509_NAME *name,
245.   	     X509_OBJECT *ret)
246.   	{

crypto/x509/by_dir.c:323:10: Call
321.   			else if (type == X509_LU_CRL)
322.   				{
323.   				if ((X509_load_crl_file(xl,b->data,
                ^
324.   					ctx->dirs_type[i])) == 0)
325.   					break;

crypto/x509/by_file.c:204:1: Parameter `ctx->store_ctx->certs->num_items`
  202.   	}
  203.   
  204. > int X509_load_crl_file(X509_LOOKUP *ctx, const char *file, int type)
  205.   	{
  206.   	int ret=0;

crypto/x509/by_file.c:256:5: Call
  254.   			goto err;
  255.   			}
  256.   		i=X509_STORE_add_crl(ctx->store_ctx,x);
             ^
  257.   		if (!i) goto err;
  258.   		ret=i;

crypto/x509/x509_vfy.c:546:1: Parameter `ctx->certs->num_items`
    544.   	}
    545.   
    546. > int X509_STORE_add_crl(X509_STORE *ctx, X509_CRL *x)
    547.   	{
    548.   	X509_OBJECT *obj,*r;

crypto/x509/x509_vfy.c:565:19: Call
    563.   	X509_OBJECT_up_ref_count(obj);
    564.   
    565.   	r=(X509_OBJECT *)lh_insert(ctx->certs,(char *)obj);
                             ^
    566.   	if (r != NULL)
    567.   		{ /* oops, put it back */

crypto/lhash/lhash.c:193:1: Parameter `lh->num_items`
      191.   	}
      192.   
      193. > char *lh_insert(LHASH *lh, char *data)
      194.   	{
      195.   	unsigned long hash;

crypto/x509/x509_vfy.c:568:3: Call
    566.   	if (r != NULL)
    567.   		{ /* oops, put it back */
    568.   		lh_delete(ctx->certs,(char *)obj);
             ^
    569.   		X509_OBJECT_free_contents(obj);
    570.   		Free(obj);

crypto/lhash/lhash.c:231:1: <LHS trace>
229.   	}
230.   
231. > char *lh_delete(LHASH *lh, char *data)
232.   	{
233.   	unsigned long hash;

crypto/lhash/lhash.c:231:1: Parameter `lh->num_items`
      229.   	}
      230.   
      231. > char *lh_delete(LHASH *lh, char *data)
      232.   	{
      233.   	unsigned long hash;

crypto/lhash/lhash.c:254:2: Binary operation: ([0, +oo] - 1):unsigned64 by call to `X509_load_crl_file` 
      252.   		}
      253.   
      254.   	lh->num_items--;
              ^
      255.   	if ((lh->num_nodes > MIN_NODES) &&
      256.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
