ssl/s3_clnt.c:534: error: INTEGER_OVERFLOW_L2
  ([0, max(0, `s->initial_ctx->sessions->num_items`)] - 1):unsigned64 by call to `ssl3_get_new_session_ticket`.
Showing all 11 steps of the trace


ssl/s3_clnt.c:175:1: Parameter `s->initial_ctx->sessions->num_items`
173.   
174.   
175. > int ssl3_connect(SSL *s)
176.   {
177.       BUF_MEM *buf = NULL;

ssl/s3_clnt.c:534:19: Call
532.           case SSL3_ST_CR_SESSION_TICKET_A:
533.           case SSL3_ST_CR_SESSION_TICKET_B:
534.               ret = ssl3_get_new_session_ticket(s);
                         ^
535.               if (ret <= 0)
536.                   goto end;

ssl/s3_clnt.c:2172:1: Parameter `s->initial_ctx->sessions->num_items`
  2170.   }
  2171.   
  2172. > int ssl3_get_new_session_ticket(SSL *s)
  2173.   {
  2174.       int ok, al, ret = 0, ticklen;

ssl/s3_clnt.c:2213:17: Call
  2211.               } else {
  2212.                   /* We carry on if this fails */
  2213.                   SSL_CTX_remove_session(s->session_ctx, s->session);
                          ^
  2214.               }
  2215.           }

ssl/ssl_sess.c:787:1: Parameter `ctx->sessions->num_items`
    785.   }
    786.   
    787. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
    788.   {
    789.       return remove_session_lock(ctx, c, 1);

ssl/ssl_sess.c:789:12: Call
    787.   int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
    788.   {
    789.       return remove_session_lock(ctx, c, 1);
                      ^
    790.   }
    791.   

ssl/ssl_sess.c:792:1: Parameter `ctx->sessions->num_items`
      790.   }
      791.   
      792. > static int remove_session_lock(SSL_CTX *ctx, SSL_SESSION *c, int lck)
      793.   {
      794.       SSL_SESSION *r;

ssl/ssl_sess.c:802:17: Call
      800.           if ((r = lh_SSL_SESSION_retrieve(ctx->sessions, c)) == c) {
      801.               ret = 1;
      802.               r = lh_SSL_SESSION_delete(ctx->sessions, c);
                             ^
      803.               SSL_SESSION_list_remove(ctx, c);
      804.           }

crypto/lhash/lhash.c:209:1: <LHS trace>
207.   }
208.   
209. > void *lh_delete(_LHASH *lh, const void *data)
210.   {
211.       unsigned long hash;

crypto/lhash/lhash.c:209:1: Parameter `lh->num_items`
        207.   }
        208.   
        209. > void *lh_delete(_LHASH *lh, const void *data)
        210.   {
        211.       unsigned long hash;

crypto/lhash/lhash.c:229:5: Binary operation: ([0, max(0, s->initial_ctx->sessions->num_items)] - 1):unsigned64 by call to `ssl3_get_new_session_ticket` 
        227.       }
        228.   
        229.       lh->num_items--;
                   ^
        230.       if ((lh->num_nodes > MIN_NODES) &&
        231.           (lh->down_load >= (lh->num_items * LH_LOAD_MULT / lh->num_nodes)))
