ssl/d1_clnt.c:249: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `ssl3_get_server_hello`.
Showing all 17 steps of the trace


ssl/d1_clnt.c:144:1: Parameter `s->ctx->sessions->p`
142.   			dtls1_get_client_method)
143.   
144. > int dtls1_connect(SSL *s)
145.   	{
146.   	BUF_MEM *buf=NULL;

ssl/d1_clnt.c:249:8: Call
247.   		case SSL3_ST_CR_SRVR_HELLO_A:
248.   		case SSL3_ST_CR_SRVR_HELLO_B:
249.   			ret=ssl3_get_server_hello(s);
              ^
250.   			if (ret <= 0) goto end;
251.   			else

ssl/s3_clnt.c:631:1: Parameter `s->ctx->sessions->p`
  629.   	}
  630.   
  631. > int ssl3_get_server_hello(SSL *s)
  632.   	{
  633.   	STACK_OF(SSL_CIPHER) *sk;

ssl/s3_clnt.c:807:7: Call
  805.   			goto f_err; 
  806.   			}
  807.   		if (ssl_check_tlsext(s,0) <= 0)
               ^
  808.   			{
  809.   			SSLerr(SSL_F_SSL3_CONNECT,SSL_R_SERVERHELLO_TLS_EXT);

ssl/t1_lib.c:390:1: Parameter `s->ctx->sessions->p`
    388.   }
    389.   
    390. > int ssl_check_tlsext(SSL *s, int is_server)
    391.   	{
    392.   	int ret=SSL_TLSEXT_ERR_NOACK;

ssl/t1_lib.c:403:4: Call
    401.   	switch (ret) {
    402.   		case SSL_TLSEXT_ERR_ALERT_FATAL:
    403.   			ssl3_send_alert(s,SSL3_AL_FATAL,al); 
              ^
    404.   			return -1;
    405.   

ssl/s3_pkt.c:1269:1: Parameter `s->ctx->sessions->p`
      1267.   	}
      1268.   
      1269. > void ssl3_send_alert(SSL *s, int level, int desc)
      1270.   	{
      1271.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1278:3: Call
      1276.   	/* If a fatal one, remove from cache */
      1277.   	if ((level == 2) && (s->session != NULL))
      1278.   		SSL_CTX_remove_session(s->ctx,s->session);
                ^
      1279.   
      1280.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:552:1: Parameter `ctx->sessions->p`
        550.   	}
        551.   
        552. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        553.   {
        554.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:554:9: Call
        552.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        553.   {
        554.   	return remove_session_lock(ctx, c, 1);
                       ^
        555.   }
        556.   

ssl/ssl_sess.c:557:1: Parameter `ctx->sessions->pmax`
          555.   }
          556.   
          557. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
          558.   	{
          559.   	SSL_SESSION *r;

ssl/ssl_sess.c:568:21: Call
          566.   			{
          567.   			ret=1;
          568.   			r=(SSL_SESSION *)lh_delete(ctx->sessions,c);
                                     ^
          569.   			SSL_SESSION_list_remove(ctx,c);
          570.   			}

crypto/lhash/lhash.c:217:1: Parameter `lh->pmax`
            215.   	}
            216.   
            217. > void *lh_delete(LHASH *lh, const void *data)
            218.   	{
            219.   	unsigned long hash;

crypto/lhash/lhash.c:243:3: Call
            241.   	if ((lh->num_nodes > MIN_NODES) &&
            242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
            243.   		contract(lh);
                     ^
            244.   
            245.   	return(ret);

crypto/lhash/lhash.c:361:1: <LHS trace>
359.   	}
360.   
361. > static void contract(LHASH *lh)
362.   	{
363.   	LHASH_NODE **n,*n1,*np;

crypto/lhash/lhash.c:361:1: Parameter `lh->p`
              359.   	}
              360.   
              361. > static void contract(LHASH *lh)
              362.   	{
              363.   	LHASH_NODE **n,*n1,*np;

crypto/lhash/lhash.c:365:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `ssl3_get_server_hello` 
              363.   	LHASH_NODE **n,*n1,*np;
              364.   
              365.   	np=lh->b[lh->p+lh->pmax-1];
                         ^
              366.   	lh->b[lh->p+lh->pmax-1]=NULL; /* 24/07-92 - eay - weird but :-( */
              367.   	if (lh->p == 0)
