ssl/ssltest.c:657: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_new`.
Showing all 18 steps of the trace


ssl/ssltest.c:656:8: Call
654.   	}
655.   
656.   	c_ssl=SSL_new(c_ctx);
              ^
657.   	s_ssl=SSL_new(s_ctx);
658.   

ssl/ssl_lib.c:226:1: Parameter `ctx->sessions->p`
  224.   	}
  225.   
  226. > SSL *SSL_new(SSL_CTX *ctx)
  227.   	{
  228.   	SSL *s;

ssl/ssltest.c:657:8: Call
655.   
656.   	c_ssl=SSL_new(c_ctx);
657.   	s_ssl=SSL_new(s_ctx);
              ^
658.   
659.   #ifndef OPENSSL_NO_KRB5

ssl/ssl_lib.c:226:1: Parameter `ctx->sessions->p`
  224.   	}
  225.   
  226. > SSL *SSL_new(SSL_CTX *ctx)
  227.   	{
  228.   	SSL *s;

ssl/ssl_lib.c:298:2: Call
  296.   	s->server=(ctx->method->ssl_accept == ssl_undefined_function)?0:1;
  297.   
  298.   	SSL_clear(s);
          ^
  299.   
  300.   	CRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL, s, &s->ex_data);

ssl/ssl_lib.c:137:1: Parameter `s->ctx->sessions->p`
    135.   	};
    136.   
    137. > int SSL_clear(SSL *s)
    138.   	{
    139.   	int state;

ssl/ssl_lib.c:185:6: Call
    183.   	ssl_clear_cipher_ctx(s);
    184.   
    185.   	if (ssl_clear_bad_session(s))
                ^
    186.   		{
    187.   		SSL_SESSION_free(s->session);

ssl/ssl_sess.c:678:1: Parameter `s->ctx->sessions->p`
      676.   	}
      677.   
      678. > int ssl_clear_bad_session(SSL *s)
      679.   	{
      680.   	if (	(s->session != NULL) &&

ssl/ssl_sess.c:684:3: Call
      682.   		!(SSL_in_init(s) || SSL_in_before(s)))
      683.   		{
      684.   		SSL_CTX_remove_session(s->ctx,s->session);
               ^
      685.   		return(1);
      686.   		}

ssl/ssl_sess.c:464:1: Parameter `ctx->sessions->p`
        462.   	}
        463.   
        464. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        465.   {
        466.   	return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:466:9: Call
        464.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
        465.   {
        466.   	return remove_session_lock(ctx, c, 1);
                       ^
        467.   }
        468.   

ssl/ssl_sess.c:469:1: Parameter `ctx->sessions->p`
          467.   }
          468.   
          469. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
          470.   	{
          471.   	SSL_SESSION *r;

ssl/ssl_sess.c:477:20: Call
          475.   		{
          476.   		if(lck) CRYPTO_w_lock(CRYPTO_LOCK_SSL_CTX);
          477.   		r=(SSL_SESSION *)lh_delete(ctx->sessions,c);
                                    ^
          478.   		if (r != NULL)
          479.   			{

crypto/lhash/lhash.c:217:1: Parameter `lh->pmax`
            215.   	}
            216.   
            217. > void *lh_delete(LHASH *lh, const void *data)
            218.   	{
            219.   	unsigned long hash;

crypto/lhash/lhash.c:243:3: Call
            241.   	if ((lh->num_nodes > MIN_NODES) &&
            242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
            243.   		contract(lh);
                     ^
            244.   
            245.   	return((void *)ret);

crypto/lhash/lhash.c:361:1: <LHS trace>
359.   	}
360.   
361. > static void contract(LHASH *lh)
362.   	{
363.   	LHASH_NODE **n,*n1,*np;

crypto/lhash/lhash.c:361:1: Parameter `lh->p`
              359.   	}
              360.   
              361. > static void contract(LHASH *lh)
              362.   	{
              363.   	LHASH_NODE **n,*n1,*np;

crypto/lhash/lhash.c:365:5: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_new` 
              363.   	LHASH_NODE **n,*n1,*np;
              364.   
              365.   	np=lh->b[lh->p+lh->pmax-1];
                         ^
              366.   	lh->b[lh->p+lh->pmax-1]=NULL; /* 24/07-92 - eay - weird but :-( */
              367.   	if (lh->p == 0)
