We introduced a bug in r22192 that can make tl-crltool error out with "ERROR: Could not get revocation list size (error code -22)". It depends on the stack contents if the function will fail or not.
The problem is that we forgot to remove a check for the "count" variable when it was removed as a parameter.
To test, download a few CRL:s and run the tl-crltool --list on them. You can find CRL URIs in most certificates.
Verified using thinlinc build 5045:
curl http://crl3.digicert.com/sha2-ha-server-g5.crl | /opt/thinlinc/libexec/tl-crltool --list
Works as expected, verified that same crl failed using tl-crltool from 4.5.0.