ssl/s3_clnt.c:280: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_items`)] - 1):unsigned64 by call to `ssl3_get_server_hello`.
Showing all 15 steps of the trace


ssl/s3_clnt.c:184:1: Parameter `s->ctx->sessions->num_items`
182.   			ssl3_get_client_method)
183.   
184. > int ssl3_connect(SSL *s)
185.   	{
186.   	BUF_MEM *buf=NULL;

ssl/s3_clnt.c:280:8: Call
278.   		case SSL3_ST_CR_SRVR_HELLO_A:
279.   		case SSL3_ST_CR_SRVR_HELLO_B:
280.   			ret=ssl3_get_server_hello(s);
              ^
281.   #ifndef OPENSSL_NO_SRP
282.   			if ((ret == 0) && (s->s3->warn_alert == SSL_AD_MISSING_SRP_USERNAME))

ssl/s3_clnt.c:767:1: Parameter `s->ctx->sessions->num_items`
  765.   	}
  766.   
  767. > int ssl3_get_server_hello(SSL *s)
  768.   	{
  769.   	STACK_OF(SSL_CIPHER) *sk;

ssl/s3_clnt.c:987:7: Call
  985.   			goto f_err; 
  986.   			}
  987.   		if (ssl_check_serverhello_tlsext(s) <= 0)
               ^
  988.   			{
  989.   			SSLerr(SSL_F_SSL3_GET_SERVER_HELLO,SSL_R_SERVERHELLO_TLSEXT);

ssl/t1_lib.c:1604:1: Parameter `s->ctx->sessions->num_items`
    1602.   	}
    1603.   
    1604. > int ssl_check_serverhello_tlsext(SSL *s)
    1605.   	{
    1606.   	int ret=SSL_TLSEXT_ERR_NOACK;

ssl/t1_lib.c:1702:4: Call
    1700.   		{
    1701.   		case SSL_TLSEXT_ERR_ALERT_FATAL:
    1702.   			ssl3_send_alert(s,SSL3_AL_FATAL,al); 
               ^
    1703.   			return -1;
    1704.   

ssl/s3_pkt.c:1431:1: Parameter `s->ctx->sessions->num_items`
      1429.   	}
      1430.   
      1431. > int ssl3_send_alert(SSL *s, int level, int desc)
      1432.   	{
      1433.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1440:3: Call
      1438.   	/* If a fatal one, remove from cache */
      1439.   	if ((level == 2) && (s->session != NULL))
      1440.   		SSL_CTX_remove_session(s->ctx,s->session);
                ^
      1441.   
      1442.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:661:1: Parameter `ctx->sessions->num_items`
        659.   	}
        660.   
        661. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        662.   {
        663.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:663:9: Call
        661.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        662.   {
        663.   	return remove_session_lock(ctx, c, 1);
                       ^
        664.   }
        665.   

ssl/ssl_sess.c:666:1: Parameter `ctx->sessions->num_items`
          664.   }
          665.   
          666. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
          667.   	{
          668.   	SSL_SESSION *r;

ssl/ssl_sess.c:677:6: Call
          675.   			{
          676.   			ret=1;
          677.   			r=lh_SSL_SESSION_delete(ctx->sessions,c);
                      ^
          678.   			SSL_SESSION_list_remove(ctx,c);
          679.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(_LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
            215.   	}
            216.   
            217. > void *lh_delete(_LHASH *lh, const void *data)
            218.   	{
            219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, max(0, s->ctx->sessions->num_items)] - 1):unsigned64 by call to `ssl3_get_server_hello` 
            238.   		}
            239.   
            240.   	lh->num_items--;
                    ^
            241.   	if ((lh->num_nodes > MIN_NODES) &&
            242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
