ssl/ssl_sess.c:553: error: INTEGER_OVERFLOW_L2
  ([0, `s->initial_ctx->sessions->num_items` + 1] - 1):unsigned64 by call to `SSL_CTX_remove_session`.
Showing all 9 steps of the trace


ssl/ssl_sess.c:418:1: Parameter `s->initial_ctx->sessions->num_items`
416.   	}
417.   
418. > int ssl_get_prev_session(SSL *s, unsigned char *session_id, int len,
419.   			const unsigned char *limit)
420.   	{

ssl/ssl_sess.c:553:3: Call
551.   		s->session_ctx->stats.sess_timeout++;
552.   		/* remove it from the cache */
553.   		SSL_CTX_remove_session(s->session_ctx,ret);
         ^
554.   		goto err;
555.   		}

ssl/ssl_sess.c:643:1: Parameter `ctx->sessions->num_items`
  641.   	}
  642.   
  643. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  644.   {
  645.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:645:9: Call
  643.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
  644.   {
  645.   	return remove_session_lock(ctx, c, 1);
                 ^
  646.   }
  647.   

ssl/ssl_sess.c:648:1: Parameter `ctx->sessions->num_items`
    646.   }
    647.   
    648. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
    649.   	{
    650.   	SSL_SESSION *r;

ssl/ssl_sess.c:659:21: Call
    657.   			{
    658.   			ret=1;
    659.   			r=(SSL_SESSION *)lh_delete(ctx->sessions,c);
                               ^
    660.   			SSL_SESSION_list_remove(ctx,c);
    661.   			}

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(LHASH *lh, const void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
      215.   	}
      216.   
      217. > void *lh_delete(LHASH *lh, const void *data)
      218.   	{
      219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, s->initial_ctx->sessions->num_items + 1] - 1):unsigned64 by call to `SSL_CTX_remove_session` 
      238.   		}
      239.   
      240.   	lh->num_items--;
              ^
      241.   	if ((lh->num_nodes > MIN_NODES) &&
      242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
