test/sslapitest.c:2606: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_free`.
Showing all 17 steps of the trace


test/sslapitest.c:2536:10: Call
2534.       SSL_CTX_set_min_proto_version(cctx, protocols[tst]);
2535.   
2536.       if (!TEST_true(create_ssl_objects(sctx, cctx, &serverssl, &clientssl, NULL,
                 ^
2537.                                         NULL))
2538.               || !TEST_true(create_ssl_connection(serverssl, clientssl,

test/ssltestlib.c:559:15: Call
  557.       if (*sssl != NULL)
  558.           serverssl = *sssl;
  559.       else if (!TEST_ptr(serverssl = SSL_new(serverctx)))
                       ^
  560.           goto error;
  561.       if (*cssl != NULL)

ssl/ssl_lib.c:494:1: Parameter `ctx->sessions->num_nodes`
    492.   }
    493.   
    494. > SSL *SSL_new(SSL_CTX *ctx)
    495.   {
    496.       SSL *s;

test/sslapitest.c:2606:5: Call
2604.   
2605.    end:
2606.       SSL_free(serverssl);
            ^
2607.       SSL_free(clientssl);
2608.       SSL_CTX_free(sctx2);

ssl/ssl_lib.c:942:1: Parameter `s->ctx->sessions->num_nodes`
  940.   }
  941.   
  942. > void SSL_free(SSL *s)
  943.   {
  944.       int i;

ssl/ssl_lib.c:1011:5: Call
  1009.       RECORD_LAYER_release(&s->rlayer);
  1010.   
  1011.       SSL_CTX_free(s->ctx);
              ^
  1012.   
  1013.       ASYNC_WAIT_CTX_free(s->waitctx);

ssl/ssl_lib.c:2769:1: Parameter `a->sessions->num_nodes`
    2767.   }
    2768.   
    2769. > void SSL_CTX_free(SSL_CTX *a)
    2770.   {
    2771.       int i;

ssl/ssl_lib.c:2795:9: Call
    2793.        */
    2794.       if (a->sessions != NULL)
    2795.           SSL_CTX_flush_sessions(a, 0);
                    ^
    2796.   
    2797.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1035:1: Parameter `s->sessions->num_nodes`
      1033.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1034.   
      1035. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      1036.   {
      1037.       unsigned long i;

ssl/ssl_sess.c:1048:5: Call
      1046.       i = lh_SSL_SESSION_get_down_load(s->sessions);
      1047.       lh_SSL_SESSION_set_down_load(s->sessions, 0);
      1048.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                  ^
      1049.       lh_SSL_SESSION_set_down_load(s->sessions, i);
      1050.       CRYPTO_THREAD_unlock(s->lock);

ssl/ssl_sess.c:1033:1: Parameter `lh->num_nodes`
        1031.   }
        1032.   
        1033. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1034.   
        1035.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1033:1: Call
        1031.   }
        1032.   
        1033. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
        1034.   
        1035.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:186:1: Parameter `lh->num_nodes`
          184.   }
          185.   
          186. > void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          187.   {
          188.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);

crypto/lhash/lhash.c:188:5: Call
          186.   void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
          187.   {
          188.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);
                     ^
          189.   }
          190.   

crypto/lhash/lhash.c:154:1: <LHS trace>
152.   }
153.   
154. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
155.                             OPENSSL_LH_DOALL_FUNC func,
156.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:154:1: Parameter `lh->num_nodes`
            152.   }
            153.   
            154. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
            155.                             OPENSSL_LH_DOALL_FUNC func,
            156.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:168:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_free` 
            166.        * memory leaks otherwise
            167.        */
            168.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                            ^
            169.           a = lh->b[i];
            170.           while (a != NULL) {
