apps/spkac.c:199: error: INTEGER_OVERFLOW_L2
  ([0, +oo] - 1):unsigned32 by call to `CONF_load_bio`.
Showing all 8 steps of the trace


apps/spkac.c:199:9: Call
197.   	}
198.   
199.   	conf = CONF_load_bio(NULL, in, NULL);
               ^
200.   
201.   	if(!conf) {

crypto/conf/conf.c:124:1: Parameter `h->num_nodes`
  122.   }
  123.   
  124. > LHASH *CONF_load_bio(LHASH *h, BIO *in, long *line)
  125.   	{
  126.   	LHASH *ret=NULL;

crypto/conf/conf.c:361:35: Call
  359.   	sprintf(btmp,"%ld",eline);
  360.   	ERR_add_error_data(2,"line ",btmp);
  361.   	if ((h != ret) && (ret != NULL)) CONF_free(ret);
                                           ^
  362.   	if (v != NULL)
  363.   		{

crypto/conf/conf.c:442:1: Parameter `conf->num_nodes`
    440.   	}
    441.   
    442. > void CONF_free(LHASH *conf)
    443.   	{
    444.   	if (conf == NULL) return;

crypto/conf/conf.c:448:2: Call
    446.   	conf->down_load=0; 	/* evil thing to make sure the 'Free()'
    447.   				 * works as expected */
    448.   	lh_doall_arg(conf,(void (*)())value_free_hash,(char *)conf);
            ^
    449.   
    450.   	/* We now have only 'section' entries in the hash table.

crypto/lhash/lhash.c:278:1: <LHS trace>
276.   	}
277.   
278. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
279.   	{
280.   	int i;

crypto/lhash/lhash.c:278:1: Parameter `lh->num_nodes`
      276.   	}
      277.   
      278. > void lh_doall_arg(LHASH *lh, void (*func)(), char *arg)
      279.   	{
      280.   	int i;

crypto/lhash/lhash.c:285:7: Binary operation: ([0, +oo] - 1):unsigned32 by call to `CONF_load_bio` 
      283.   	/* reverse the order so we search from 'top to bottom'
      284.   	 * We were having memory leaks otherwise */
      285.   	for (i=lh->num_nodes-1; i>=0; i--)
                   ^
      286.   		{
      287.   		a=lh->b[i];
