ssl/d1_srvr.c:321: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `ssl3_get_client_hello`.
Showing all 15 steps of the trace


ssl/d1_srvr.c:163:1: Parameter `s->ctx->sessions->num_items`
161.   			DTLSv1_2_enc_data)
162.   
163. > int dtls1_accept(SSL *s)
164.   	{
165.   	BUF_MEM *buf;

ssl/d1_srvr.c:321:8: Call
319.   
320.   			s->shutdown=0;
321.   			ret=ssl3_get_client_hello(s);
              ^
322.   			if (ret <= 0) goto end;
323.   			dtls1_stop_timer(s);

ssl/s3_srvr.c:892:1: Parameter `s->ctx->sessions->num_items`
  890.   	}
  891.   
  892. > int ssl3_get_client_hello(SSL *s)
  893.   	{
  894.   	int i,j,ok,al=SSL_AD_INTERNAL_ERROR,ret= -1;

ssl/s3_srvr.c:1204:8: Call
  1202.   	if (s->version >= SSL3_VERSION)
  1203.   		{
  1204.   		if (!ssl_parse_clienthello_tlsext(s,&p,d,n))
                 ^
  1205.   			{
  1206.   			SSLerr(SSL_F_SSL3_GET_CLIENT_HELLO,SSL_R_PARSE_TLSEXT);

ssl/t1_lib.c:2523:1: Parameter `s->ctx->sessions->num_items`
    2521.   	}
    2522.   
    2523. > int ssl_parse_clienthello_tlsext(SSL *s, unsigned char **p, unsigned char *d, int n) 
    2524.   	{
    2525.   	int al = -1;

ssl/t1_lib.c:2529:3: Call
    2527.   	if (ssl_scan_clienthello_tlsext(s, p, d, n, &al) <= 0) 
    2528.   		{
    2529.   		ssl3_send_alert(s,SSL3_AL_FATAL,al); 
              ^
    2530.   		return 0;
    2531.   		}

ssl/s3_pkt.c:1796:1: Parameter `s->ctx->sessions->num_items`
      1794.   	}
      1795.   
      1796. > int ssl3_send_alert(SSL *s, int level, int desc)
      1797.   	{
      1798.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1805:3: Call
      1803.   	/* If a fatal one, remove from cache */
      1804.   	if ((level == SSL3_AL_FATAL) && (s->session != NULL))
      1805.   		SSL_CTX_remove_session(s->ctx,s->session);
                ^
      1806.   
      1807.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:683:1: Parameter `ctx->sessions->num_items`
        681.   	}
        682.   
        683. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        684.   {
        685.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:685:9: Call
        683.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        684.   {
        685.   	return remove_session_lock(ctx, c, 1);
                       ^
        686.   }
        687.   

ssl/ssl_sess.c:688:1: Parameter `ctx->sessions->num_items`
          686.   }
          687.   
          688. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
          689.   	{
          690.   	SSL_SESSION *r;

ssl/ssl_sess.c:699:6: Call
          697.   			{
          698.   			ret=1;
          699.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                      ^
          700.   			SSL_SESSION_list_remove(ctx,c);
          701.   			}

crypto/lhash/lhash.c:218:1: <LHS trace>
216.   	}
217.   
218. > void *lh_delete(_LHASH *lh, const void *data)
219.   	{
220.   	unsigned long hash;

crypto/lhash/lhash.c:218:1: Parameter `lh->num_items`
            216.   	}
            217.   
            218. > void *lh_delete(_LHASH *lh, const void *data)
            219.   	{
            220.   	unsigned long hash;

crypto/lhash/lhash.c:241:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `ssl3_get_client_hello` 
            239.   		}
            240.   
            241.   	lh->num_items--;
                    ^
            242.   	if ((lh->num_nodes > MIN_NODES) &&
            243.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
