apps/x509.c:822: error: INTEGER_OVERFLOW_L2
  ([0, 1] - 1):unsigned64 by call to `x509_certify`.
Showing all 13 steps of the trace


apps/x509.c:193:6: Call
191.   	CAkeyformat=FORMAT_PEM;
192.   
193.   	ctx=X509_STORE_new();
            ^
194.   	if (ctx == NULL) goto end;
195.   	X509_STORE_set_verify_cb_func(ctx,callb);

crypto/x509/x509_lu.c:204:13: Call
  202.   	if ((ret=(X509_STORE *)OPENSSL_malloc(sizeof(X509_STORE))) == NULL)
  203.   		return(NULL);
  204.   	ret->certs=lh_new(x509_object_hash,x509_object_cmp);
                     ^
  205.   	ret->cache=1;
  206.   	ret->get_cert_methods=sk_X509_LOOKUP_new_null();

crypto/lhash/lhash.c:133:2: Assignment
    131.   	ret->up_load=UP_LOAD;
    132.   	ret->down_load=DOWN_LOAD;
    133.   	ret->num_items=0;
            ^
    134.   
    135.   	ret->num_expands=0;

apps/x509.c:822:10: Call
820.   				
821.   				assert(need_rand);
822.   				if (!x509_certify(ctx,CAfile,digest,x,xca,
                ^
823.   					CApkey, CAserial,CA_createserial,days, clrext,
824.   					extconf, extsect))

apps/x509.c:939:1: Parameter `ctx->certs->num_items`
  937.   	}
  938.   
  939. > static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
  940.   	     X509 *x, X509 *xca, EVP_PKEY *pkey, char *serialfile, int create,
  941.   	     int days, int clrext, LHASH *conf, char *section)

apps/x509.c:1038:7: Call
  1036.   	io=NULL;
  1037.   	
  1038.   	if (!X509_STORE_add_cert(ctx,x)) goto end;
                ^
  1039.   
  1040.   	/* NOTE: this certificate can/should be self signed, unless it was

crypto/x509/x509_vfy.c:632:1: Parameter `ctx->certs->num_items`
    630.   	}
    631.   
    632. > int X509_STORE_add_cert(X509_STORE *ctx, X509 *x)
    633.   	{
    634.   	X509_OBJECT *obj,*r;

crypto/x509/x509_vfy.c:651:19: Call
    649.   	X509_OBJECT_up_ref_count(obj);
    650.   
    651.   	r=(X509_OBJECT *)lh_insert(ctx->certs,obj);
                             ^
    652.   	if (r != NULL)
    653.   		{ /* oops, put it back */

crypto/lhash/lhash.c:179:1: Parameter `lh->num_items`
      177.   	}
      178.   
      179. > void *lh_insert(LHASH *lh, void *data)
      180.   	{
      181.   	unsigned long hash;

crypto/x509/x509_vfy.c:654:3: Call
    652.   	if (r != NULL)
    653.   		{ /* oops, put it back */
    654.   		lh_delete(ctx->certs,obj);
             ^
    655.   		X509_OBJECT_free_contents(obj);
    656.   		OPENSSL_free(obj);

crypto/lhash/lhash.c:217:1: <LHS trace>
215.   	}
216.   
217. > void *lh_delete(LHASH *lh, void *data)
218.   	{
219.   	unsigned long hash;

crypto/lhash/lhash.c:217:1: Parameter `lh->num_items`
      215.   	}
      216.   
      217. > void *lh_delete(LHASH *lh, void *data)
      218.   	{
      219.   	unsigned long hash;

crypto/lhash/lhash.c:240:2: Binary operation: ([0, 1] - 1):unsigned64 by call to `x509_certify` 
      238.   		}
      239.   
      240.   	lh->num_items--;
              ^
      241.   	if ((lh->num_nodes > MIN_NODES) &&
      242.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
