test/sslapitest.c:2999: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_free`.
Showing all 17 steps of the trace


test/sslapitest.c:2848:14: Call
2846.            * PSK
2847.            */
2848.           if (!TEST_true(create_ssl_objects(sctx, cctx, &serverssl, &clientssl,
                     ^
2849.                                                    NULL, NULL))
2850.                   || !TEST_true(create_ssl_connection(serverssl, clientssl,

test/ssltestlib.c:635:15: Call
  633.       if (*sssl != NULL)
  634.           serverssl = *sssl;
  635.       else if (!TEST_ptr(serverssl = SSL_new(serverctx)))
                       ^
  636.           goto error;
  637.       if (*cssl != NULL)

ssl/ssl_lib.c:668:1: Parameter `ctx->sessions->num_nodes`
    666.   }
    667.   
    668. > SSL *SSL_new(SSL_CTX *ctx)
    669.   {
    670.       SSL *s;

test/sslapitest.c:2999:5: Call
2997.       SSL_SESSION_free(serverpsk);
2998.       clientpsk = serverpsk = NULL;
2999.       SSL_free(serverssl);
            ^
3000.       SSL_free(clientssl);
3001.       SSL_CTX_free(sctx);

ssl/ssl_lib.c:1124:1: Parameter `s->ctx->sessions->num_nodes`
  1122.   }
  1123.   
  1124. > void SSL_free(SSL *s)
  1125.   {
  1126.       int i;

ssl/ssl_lib.c:1196:5: Call
  1194.       RECORD_LAYER_release(&s->rlayer);
  1195.   
  1196.       SSL_CTX_free(s->ctx);
              ^
  1197.   
  1198.       ASYNC_WAIT_CTX_free(s->waitctx);

ssl/ssl_lib.c:3055:1: Parameter `a->sessions->num_nodes`
    3053.   }
    3054.   
    3055. > void SSL_CTX_free(SSL_CTX *a)
    3056.   {
    3057.       int i;

ssl/ssl_lib.c:3081:9: Call
    3079.        */
    3080.       if (a->sessions != NULL)
    3081.           SSL_CTX_flush_sessions(a, 0);
                    ^
    3082.   
    3083.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1116:1: Parameter `s->sessions->num_nodes`
      1114.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1115.   
      1116. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      1117.   {
      1118.       unsigned long i;

ssl/ssl_sess.c:1129:5: Call
      1127.       i = lh_SSL_SESSION_get_down_load(s->sessions);
      1128.       lh_SSL_SESSION_set_down_load(s->sessions, 0);
      1129.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                  ^
      1130.       lh_SSL_SESSION_set_down_load(s->sessions, i);
      1131.       CRYPTO_THREAD_unlock(s->lock);

ssl/ssl_sess.c:1114:1: Parameter `lh->num_nodes`
        1112.   }
        1113.   
        1114. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1115.   
        1116.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1114:1: Call
        1112.   }
        1113.   
        1114. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1115.   
        1116.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:205:1: Parameter `lh->num_nodes`
          203.   }
          204.   
          205. > void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          206.   {
          207.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);

crypto/lhash/lhash.c:207:5: Call
          205.   void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          206.   {
          207.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);
                     ^
          208.   }
          209.   

crypto/lhash/lhash.c:173:1: <LHS trace>
171.   }
172.   
173. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
174.                             OPENSSL_LH_DOALL_FUNC func,
175.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:173:1: Parameter `lh->num_nodes`
            171.   }
            172.   
            173. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
            174.                             OPENSSL_LH_DOALL_FUNC func,
            175.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:187:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_free` 
            185.        * memory leaks otherwise
            186.        */
            187.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                            ^
            188.           a = lh->b[i];
            189.           while (a != NULL) {
