ssl/ssl_lib.c:632: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->ctx->sessions->num_nodes`)] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 11 steps of the trace


ssl/ssl_lib.c:541:1: Parameter `s->ctx->sessions->num_nodes`
539.   }
540.   
541. > void SSL_free(SSL *s)
542.   {
543.       int i;

ssl/ssl_lib.c:632:9: Call
630.   
631.       if (s->ctx)
632.           SSL_CTX_free(s->ctx);
               ^
633.   
634.   #ifndef OPENSSL_NO_KRB5

ssl/ssl_lib.c:2081:1: Parameter `a->sessions->num_nodes`
  2079.   #endif
  2080.   
  2081. > void SSL_CTX_free(SSL_CTX *a)
  2082.   {
  2083.       int i;

ssl/ssl_lib.c:2114:9: Call
  2112.        */
  2113.       if (a->sessions != NULL)
  2114.           SSL_CTX_flush_sessions(a, 0);
                  ^
  2115.   
  2116.       CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:971:1: Parameter `s->sessions->num_nodes`
    969.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION, TIMEOUT_PARAM)
    970.   
    971. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    972.   {
    973.       unsigned long i;

ssl/ssl_sess.c:984:5: Call
    982.       i = CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load;
    983.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = 0;
    984.       lh_SSL_SESSION_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout),
               ^
    985.                                TIMEOUT_PARAM, &tp);
    986.       CHECKED_LHASH_OF(SSL_SESSION, tp.cache)->down_load = i;

crypto/lhash/lhash.c:298:1: Parameter `lh->num_nodes`
      296.   }
      297.   
      298. > void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      299.   {
      300.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:300:5: Call
      298.   void lh_doall_arg(_LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      299.   {
      300.       doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
                 ^
      301.   }
      302.   

crypto/lhash/lhash.c:260:1: <LHS trace>
258.   }
259.   
260. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
261.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
262.   {

crypto/lhash/lhash.c:260:1: Parameter `lh->num_nodes`
        258.   }
        259.   
        260. > static void doall_util_fn(_LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
        261.                             LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
        262.   {

crypto/lhash/lhash.c:273:10: Binary operation: ([0, max(0, s->ctx->sessions->num_nodes)] - 1):unsigned32 by call to `SSL_CTX_free` 
        271.        * memory leaks otherwise
        272.        */
        273.       for (i = lh->num_nodes - 1; i >= 0; i--) {
                        ^
        274.           a = lh->b[i];
        275.           while (a != NULL) {
