apps/s_server.c:2106: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 15 steps of the trace


apps/s_server.c:2054:14: Call
2052.           srp_callback_parm.login = NULL;
2053.           if ((ret =
2054.                SRP_VBASE_init(srp_callback_parm.vb,
                     ^
2055.                               srp_verifier_file)) != SRP_NO_ERROR) {
2056.               BIO_printf(bio_err,

crypto/srp/srp_vfy.c:451:5: Call
  449.       SRP_user_pwd_free(user_pwd);
  450.   
  451.       TXT_DB_free(tmpdb);
             ^
  452.       BIO_free_all(in);
  453.   

crypto/txt_db/txt_db.c:282:1: Parameter `(*db->index)->num_nodes`
    280.   }
    281.   
    282. > void TXT_DB_free(TXT_DB *db)
    283.   {
    284.       int i, n;

apps/s_server.c:2106:5: Call
2104.       ret = 0;
2105.    end:
2106.       SSL_CTX_free(ctx);
            ^
2107.       SSL_SESSION_free(psksess);
2108.       set_keylog_file(NULL, NULL);

ssl/ssl_lib.c:2883:1: Parameter `a->sessions->num_nodes`
  2881.   }
  2882.   
  2883. > void SSL_CTX_free(SSL_CTX *a)
  2884.   {
  2885.       int i;

ssl/ssl_lib.c:2909:9: Call
  2907.        */
  2908.       if (a->sessions != NULL)
  2909.           SSL_CTX_flush_sessions(a, 0);
                  ^
  2910.   
  2911.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:1045:1: Parameter `s->sessions->num_nodes`
    1043.   IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
    1044.   
    1045. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    1046.   {
    1047.       unsigned long i;

ssl/ssl_sess.c:1058:5: Call
    1056.       i = lh_SSL_SESSION_get_down_load(s->sessions);
    1057.       lh_SSL_SESSION_set_down_load(s->sessions, 0);
    1058.       lh_SSL_SESSION_doall_TIMEOUT_PARAM(tp.cache, timeout_cb, &tp);
                ^
    1059.       lh_SSL_SESSION_set_down_load(s->sessions, i);
    1060.       CRYPTO_THREAD_unlock(s->lock);

ssl/ssl_sess.c:1043:1: Parameter `lh->num_nodes`
      1041.   }
      1042.   
      1043. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1044.   
      1045.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

ssl/ssl_sess.c:1043:1: Call
      1041.   }
      1042.   
      1043. > IMPLEMENT_LHASH_DOALL_ARG(SSL_SESSION, TIMEOUT_PARAM);
      1044.   
      1045.   void SSL_CTX_flush_sessions(SSL_CTX *s, long t)

crypto/lhash/lhash.c:186:1: Parameter `lh->num_nodes`
        184.   }
        185.   
        186. > void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
        187.   {
        188.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);

crypto/lhash/lhash.c:188:5: Call
        186.   void OPENSSL_LH_doall_arg(OPENSSL_LHASH *lh, OPENSSL_LH_DOALL_FUNCARG func, void *arg)
        187.   {
        188.       doall_util_fn(lh, 1, (OPENSSL_LH_DOALL_FUNC)0, func, arg);
                   ^
        189.   }
        190.   

crypto/lhash/lhash.c:154:1: <LHS trace>
152.   }
153.   
154. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
155.                             OPENSSL_LH_DOALL_FUNC func,
156.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:154:1: Parameter `lh->num_nodes`
          152.   }
          153.   
          154. > static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,
          155.                             OPENSSL_LH_DOALL_FUNC func,
          156.                             OPENSSL_LH_DOALL_FUNCARG func_arg, void *arg)

crypto/lhash/lhash.c:168:10: Binary operation: ([0, +oo] - 1):unsigned32 by call to `SSL_CTX_free` 
          166.        * memory leaks otherwise
          167.        */
          168.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                          ^
          169.           a = lh->b[i];
          170.           while (a != NULL) {
