ssl/ssl_sess.c:572: error: INTEGER_OVERFLOW_L2
  ([0, 1+max(0, `s->initial_ctx->sessions->num_items`)] - 1):unsigned64 by call to `SSL_CTX_remove_session`.
Showing all 9 steps of the trace


ssl/ssl_sess.c:432:1: Parameter `s->initial_ctx->sessions->num_items`
430.    *     if the server should issue a new session ticket (to 0 otherwise).
431.    */
432. > int ssl_get_prev_session(SSL *s, unsigned char *session_id, int len,
433.                            const unsigned char *limit)
434.   {

ssl/ssl_sess.c:572:13: Call
570.           if (try_session_cache) {
571.               /* session was from the cache, so remove it */
572.               SSL_CTX_remove_session(s->session_ctx, ret);
                   ^
573.           }
574.           goto err;

ssl/ssl_sess.c:673:1: Parameter `ctx->sessions->num_items`
  671.   }
  672.   
  673. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  674.   {
  675.       return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:675:12: Call
  673.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  674.   {
  675.       return remove_session_lock(ctx, c, 1);
                    ^
  676.   }
  677.   

ssl/ssl_sess.c:678:1: Parameter `ctx->sessions->num_items`
    676.   }
    677.   
    678. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
    679.   {
    680.       SSL_SESSION *r;

ssl/ssl_sess.c:688:17: Call
    686.           if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) == c) {
    687.               ret = 1;
    688.               r = lh_SSL_SESSION_delete(ctx->sessions, c);
                           ^
    689.               SSL_SESSION_list_remove(ctx, c);
    690.           }

crypto/lhash/lhash.c:213:1: <LHS trace>
211.   }
212.   
213. > void *lh_delete(_LHASH *lh, const void *data)
214.   {
215.       unsigned long hash;

crypto/lhash/lhash.c:213:1: Parameter `lh->num_items`
      211.   }
      212.   
      213. > void *lh_delete(_LHASH *lh, const void *data)
      214.   {
      215.       unsigned long hash;

crypto/lhash/lhash.c:233:5: Binary operation: ([0, 1+max(0, s->initial_ctx->sessions->num_items)] - 1):unsigned64 by call to `SSL_CTX_remove_session` 
      231.       }
      232.   
      233.       lh->num_items--;
                 ^
      234.       if ((lh->num_nodes > MIN_NODES) &&
      235.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
