ssl/ssl_lib.c:288: error: INTEGER_OVERFLOW_L2
  ([0, `s->ctx->sessions->num_nodes`] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 9 steps of the trace


ssl/ssl_lib.c:233:1: Parameter `s->ctx->sessions->num_nodes`
231.       }
232.   
233. > void SSL_free(SSL *s)
234.   	{
235.   	int i;

ssl/ssl_lib.c:288:14: Call
286.   	/* Free up if allocated */
287.   
288.   	if (s->ctx) SSL_CTX_free(s->ctx);
                    ^
289.   
290.   	if (s->client_CA != NULL)

ssl/ssl_lib.c:1005:1: Parameter `a->sessions->num_nodes`
  1003.       { Free(comp); }
  1004.   
  1005. > void SSL_CTX_free(SSL_CTX *a)
  1006.   	{
  1007.   	int i;

ssl/ssl_lib.c:1027:3: Call
  1025.   	if (a->sessions != NULL)
  1026.   		{
  1027.   		SSL_CTX_flush_sessions(a,0);
            ^
  1028.   		lh_free(a->sessions);
  1029.   		}

ssl/ssl_sess.c:503:1: Parameter `s->sessions->num_nodes`
    501.   	}
    502.   
    503. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    504.   	{
    505.   	unsigned long i;

ssl/ssl_sess.c:515:2: Call
    513.   	i=tp.cache->down_load;
    514.   	tp.cache->down_load=0;
    515.   	lh_doall_arg(tp.cache,(void (*)())timeout,(char *)&tp);
            ^
    516.   	tp.cache->down_load=i;
    517.   	CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

crypto/lhash/lhash.c:289:1: <LHS trace>
287.   	}
288.   
289. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
290.   	{
291.   	int i;

crypto/lhash/lhash.c:289:1: Parameter `lh->num_nodes`
      287.   	}
      288.   
      289. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
      290.   	{
      291.   	int i;

crypto/lhash/lhash.c:296:7: Binary operation: ([0, s->ctx->sessions->num_nodes] - 1):unsigned32 by call to `SSL_CTX_free` 
      294.   	/* reverse the order so we search from 'top to bottom'
      295.   	 * We were having memory leaks otherwise */
      296.   	for (i=lh->num_nodes-1; i>=0; i--)
                   ^
      297.   		{
      298.   		a=lh->b[i];
