apps/s_server.c:2061: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_free`.
Showing all 16 steps of the trace


apps/s_server.c:1737:7: Call
1735.   
1736.   	if (con == NULL) {
1737.   		con=SSL_new(ctx);
              ^
1738.   #ifndef OPENSSL_NO_TLSEXT
1739.   	if (s_tlsextdebug)

ssl/ssl_lib.c:268:1: Parameter `ctx->sessions->num_nodes`
  266.   	}
  267.   
  268. > SSL *SSL_new(SSL_CTX *ctx)
  269.   	{
  270.   	SSL *s;

apps/s_server.c:1764:2: Call
1762.   						 strlen((char *)context));
1763.   	}
1764.   	SSL_clear(con);
         ^
1765.   #if 0
1766.   #ifdef TLSEXT_TYPE_opaque_prf_input

ssl/ssl_lib.c:179:1: Parameter `s->ctx->sessions->num_nodes`
  177.   	};
  178.   
  179. > int SSL_clear(SSL *s)
  180.   	{
  181.   

apps/s_server.c:2061:3: Call
2059.   		SSL_shutdown(con);
2060.   #endif
2061.   		SSL_free(con);
          ^
2062.   		}
2063.   	BIO_printf(bio_s_out,"CONNECTION CLOSED\n");

ssl/ssl_lib.c:485:1: Parameter `s->initial_ctx->sessions->num_nodes`
  483.   	}
  484.   
  485. > void SSL_free(SSL *s)
  486.   	{
  487.   	int i;

ssl/ssl_lib.c:547:22: Call
  545.   	if (s->ctx) SSL_CTX_free(s->ctx);
  546.   #ifndef OPENSSL_NO_TLSEXT
  547.   	if (s->initial_ctx) SSL_CTX_free(s->initial_ctx);
                              ^
  548.   #ifndef OPENSSL_NO_EC
  549.   	if (s->tlsext_ecpointformatlist) OPENSSL_free(s->tlsext_ecpointformatlist);

ssl/ssl_lib.c:1594:1: Parameter `a->sessions->num_nodes`
    1592.   #endif
    1593.   
    1594. > void SSL_CTX_free(SSL_CTX *a)
    1595.   	{
    1596.   	int i;

ssl/ssl_lib.c:1626:3: Call
    1624.   	 */
    1625.   	if (a->sessions != NULL)
    1626.   		SSL_CTX_flush_sessions(a,0);
              ^
    1627.   
    1628.   	CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:858:1: Parameter `s->sessions->num_nodes`
      856.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
      857.   
      858. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
      859.   	{
      860.   	unsigned long i;

ssl/ssl_sess.c:870:2: Call
      868.   	i=CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
      869.   	CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load=0;
      870.   	lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
              ^
      871.   				 TIMEOUT_PARAM, &tp);
      872.   	CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load=i;

crypto/lhash/lhash.c:305:1: Parameter `lh->num_nodes`
        303.   	}
        304.   
        305. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
        306.   	{
        307.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:307:2: Call
        305.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
        306.   	{
        307.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                ^
        308.   	}
        309.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
          268.   	}
          269.   
          270. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
          271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
          272.   	{

crypto/lhash/lhash.c:281:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_free` 
          279.   	/* reverse the order so we search from 'top to bottom'
          280.   	 * We were having memory leaks otherwise */
          281.   	for (i=lh->num_nodes-1; i>=0; i--)
                       ^
          282.   		{
          283.   		a=lh->b[i];
