ssl/bio_ssl.c:430: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_dup`.
Showing all 18 steps of the trace


ssl/bio_ssl.c:429:13: Call
427.           dbio = (BIO *)ptr;
428.           if (((BIO_SSL *)dbio->ptr)->ssl != NULL)
429.               SSL_free(((BIO_SSL *)dbio->ptr)->ssl);
                   ^
430.           ((BIO_SSL *)dbio->ptr)->ssl = SSL_dup(ssl);
431.           ((BIO_SSL *)dbio->ptr)->renegotiate_count =

ssl/ssl_lib.c:541:1: Parameter `s->initial_ctx->sessions->num_nodes`
  539.   }
  540.   
  541. > void SSL_free(SSL *s)
  542.   {
  543.       int i;

ssl/bio_ssl.c:430:39: Call
428.           if (((BIO_SSL *)dbio->ptr)->ssl != NULL)
429.               SSL_free(((BIO_SSL *)dbio->ptr)->ssl);
430.           ((BIO_SSL *)dbio->ptr)->ssl = SSL_dup(ssl);
                                             ^
431.           ((BIO_SSL *)dbio->ptr)->renegotiate_count =
432.               ((BIO_SSL *)b->ptr)->renegotiate_count;

ssl/ssl_lib.c:2793:1: Parameter `s->ctx->sessions->num_nodes`
  2791.   }
  2792.   
  2793. > SSL *SSL_dup(SSL *s)
  2794.   {
  2795.       STACK_OF(X509_NAME) *sk;

ssl/ssl_lib.c:2800:16: Call
  2798.       int i;
  2799.   
  2800.       if ((ret = SSL_new(SSL_get_SSL_CTX(s))) == NULL)
                         ^
  2801.           return (NULL);
  2802.   

ssl/ssl_lib.c:283:1: Parameter `ctx->sessions->num_nodes`
    281.   }
    282.   
    283. > SSL *SSL_new(SSL_CTX *ctx)
    284.   {
    285.       SSL *s;

ssl/ssl_lib.c:422:9: Call
    420.    err:
    421.       if (s != NULL)
    422.           SSL_free(s);
                   ^
    423.       SSLerr(SSL_F_SSL_NEW, ERR_R_MALLOC_FAILURE);
    424.       return (NULL);

ssl/ssl_lib.c:541:1: Parameter `s->initial_ctx->sessions->num_nodes`
      539.   }
      540.   
      541. > void SSL_free(SSL *s)
      542.   {
      543.       int i;

ssl/ssl_lib.c:606:9: Call
      604.           OPENSSL_free(s->tlsext_hostname);
      605.       if (s->initial_ctx)
      606.           SSL_CTX_free(s->initial_ctx);
                     ^
      607.   # ifndef OPENSSL_NO_EC
      608.       if (s->tlsext_ecpointformatlist)

ssl/ssl_lib.c:2045:1: Parameter `a->sessions->num_nodes`
        2043.   }
        2044.   
        2045. > void SSL_CTX_free(SSL_CTX *a)
        2046.   {
        2047.       int i;

ssl/ssl_lib.c:2078:9: Call
        2076.        */
        2077.       if (a->sessions != NULL)
        2078.           SSL_CTX_flush_sessions(a, 0);
                        ^
        2079.   
        2080.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:971:1: Parameter `s->sessions->num_nodes`
          969.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
          970.   
          971. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
          972.   {
          973.       unsigned long i;

ssl/ssl_sess.c:984:5: Call
          982.       i = CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
          983.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = 0;
          984.       lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
                     ^
          985.                                TIMEOUT_PARAM, &tp);
          986.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = i;

crypto/lhash/lhash.c:296:1: Parameter `lh->num_nodes`
            294.   }
            295.   
            296. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
            297.   {
            298.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:298:5: Call
            296.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
            297.   {
            298.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                       ^
            299.   }
            300.   

crypto/lhash/lhash.c:258:1: <LHS trace>
256.   }
257.   
258. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
259.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
260.   {

crypto/lhash/lhash.c:258:1: Parameter `lh->num_nodes`
              256.   }
              257.   
              258. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
              259.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
              260.   {

crypto/lhash/lhash.c:271:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_dup` 
              269.        * memory leaks otherwise
              270.        */
              271.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                              ^
              272.           a = lh->b[i];
              273.           while (a != NULL) {
