ssl/s3_srvr.c:806: error: INTEGER_OVERFLOW_L2
  ([0, `s->ctx->sessions->num_items` + 1] - 1):unsigned64 by call to `ssl3_send_alert`.
Showing all 11 steps of the trace


ssl/s3_srvr.c:546:1: Parameter `s->ctx->sessions->num_items`
544.   	}
545.   
546. > static int ssl3_get_client_hello(SSL *s)
547.   	{
548.   	int i,j,ok,al,ret= -1;

ssl/s3_srvr.c:567:4: Call
565.   		s->state=SSL3_ST_SR_CLNT_HELLO_B;
566.   		}
567.   	n=ssl3_get_message(s,
          ^
568.   		SSL3_ST_SR_CLNT_HELLO_B,
569.   		SSL3_ST_SR_CLNT_HELLO_C,

ssl/s3_both.c:263:1: Parameter `s->ctx->sessions->num_items`
  261.   	}
  262.   
  263. > long ssl3_get_message(SSL *s, int st1, int stn, int mt, long max, int *ok)
  264.   	{
  265.   	unsigned char *p;

ssl/s3_srvr.c:806:3: Call
804.   		{
805.   f_err:
806.   		ssl3_send_alert(s,SSL3_AL_FATAL,al);
         ^
807.   		}
808.   err:

ssl/s3_pkt.c:1022:1: Parameter `s->ctx->sessions->num_items`
  1020.   	}
  1021.   
  1022. > void ssl3_send_alert(SSL *s, int level, int desc)
  1023.   	{
  1024.   	/* Map tls/ssl alert value to correct one */

ssl/s3_pkt.c:1029:3: Call
  1027.   	/* If a fatal one, remove from cache */
  1028.   	if ((level == 2) && (s->session != NULL))
  1029.   		SSL_CTX_remove_session(s->ctx,s->session);
            ^
  1030.   
  1031.   	s->s3->alert_dispatch=1;

ssl/ssl_sess.c:325:1: Parameter `ctx->sessions->num_items`
    323.   	}
    324.   
    325. > int SSL_CTX_remove_session(SSL_CTX *ctx, SSL_SESSION *c)
    326.   	{
    327.   	SSL_SESSION *r;

ssl/ssl_sess.c:333:20: Call
    331.   		{
    332.   		CRYPTO_w_lock(CRYPTO_LOCK_SSL_CTX);
    333.   		r=(SSL_SESSION *)lh_delete(ctx->sessions,(char *)c);
                              ^
    334.   		if (r != NULL)
    335.   			{

crypto/lhash/lhash.c:231:1: <LHS trace>
229.   	}
230.   
231. > char *lh_delete(LHASH *lh, char *data)
232.   	{
233.   	unsigned long hash;

crypto/lhash/lhash.c:231:1: Parameter `lh->num_items`
      229.   	}
      230.   
      231. > char *lh_delete(LHASH *lh, char *data)
      232.   	{
      233.   	unsigned long hash;

crypto/lhash/lhash.c:254:2: Binary operation: ([0, s->ctx->sessions->num_items + 1] - 1):unsigned64 by call to `ssl3_send_alert` 
      252.   		}
      253.   
      254.   	lh->num_items--;
              ^
      255.   	if ((lh->num_nodes > MIN_NODES) &&
      256.   		(lh->down_load >= (lh->num_items*LH_LOAD_MULT/lh->num_nodes)))
