apps/ocsp.c:1301: error: INTEGER_OVERFLOW_L2
  ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 13 steps of the trace


apps/ocsp.c:1276:15: Call
1274.       if (use_ssl == 1) {
1275.           BIO *sbio;
1276.           ctx = SSL_CTX_new(TLS_client_method());
                      ^
1277.           if (ctx == NULL) {
1278.               BIO_printf(bio_err, "Error creating SSL context.\n");

ssl/ssl_lib.c:1732:21: Call
  1730.       ret->app_verify_cookie_cb = 0;
  1731.   
  1732.       ret->sessions = lh_SSL_SESSION_new();
                              ^
  1733.       if (ret->sessions == NULL)
  1734.           goto err;

crypto/lhash/lhash.c:126:5: Assignment
    124.       ret->comp = ((c == NULL) ? (LHASH_COMP_FN_TYPE)strcmp : c);
    125.       ret->hash = ((h == NULL) ? (LHASH_HASH_FN_TYPE)lh_strhash : h);
    126.       ret->num_nodes = MIN_NODES / 2;
               ^
    127.       ret->num_alloc_nodes = MIN_NODES;
    128.       ret->p = 0;

apps/ocsp.c:1301:5: Call
1299.    end:
1300.       BIO_free_all(cbio);
1301.       SSL_CTX_free(ctx);
            ^
1302.       return resp;
1303.   }

ssl/ssl_lib.c:1829:1: Parameter `a->sessions->num_nodes`
  1827.   }
  1828.   
  1829. > void SSL_CTX_free(SSL_CTX *a)
  1830.   {
  1831.       int i;

ssl/ssl_lib.c:1861:9: Call
  1859.        */
  1860.       if (a->sessions != NULL)
  1861.           SSL_CTX_flush_sessions(a, 0);
                  ^
  1862.   
  1863.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1067:1: Parameter `s->sessions->num_nodes`
    1065.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
    1066.   
    1067. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    1068.   {
    1069.       unsigned long i;

ssl/ssl_sess.c:1080:5: Call
    1078.       i = CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
    1079.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = 0;
    1080.       lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
                ^
    1081.                                TIMEOUT_PARAM, &tp);
    1082.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = i;

crypto/lhash/lhash.c:294:1: Parameter `lh->num_nodes`
      292.   }
      293.   
      294. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      295.   {
      296.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:296:5: Call
      294.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      295.   {
      296.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                 ^
      297.   }
      298.   

crypto/lhash/lhash.c:256:1: <LHS trace>
254.   }
255.   
256. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
257.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
258.   {

crypto/lhash/lhash.c:256:1: Parameter `lh->num_nodes`
        254.   }
        255.   
        256. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
        257.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
        258.   {

crypto/lhash/lhash.c:269:10: Binary operation: ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free` 
        267.        * memory leaks otherwise
        268.        */
        269.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                        ^
        270.           a = lh->b[i];
        271.           while (a != NULL) {
