crypto/dsa/dsa_asn1.c:71: error: NULL_DEREFERENCE
  pointer `sig` last assigned on line 70 could be null and is dereferenced at line 71, column 3.
Showing all 16 steps of the trace


crypto/dsa/dsa_asn1.c:66:1: start of procedure sig_cb()
64.   
65.   /* Override the default new methods */
66. > static int sig_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it)
67.   {
68.   	if(operation == ASN1_OP_NEW_PRE) {

crypto/dsa/dsa_asn1.c:68:5: Taking true branch
66.   static int sig_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it)
67.   {
68.   	if(operation == ASN1_OP_NEW_PRE) {
          ^
69.   		DSA_SIG *sig;
70.   		sig = OPENSSL_malloc(sizeof(DSA_SIG));

crypto/dsa/dsa_asn1.c:70:3: 
68.   	if(operation == ASN1_OP_NEW_PRE) {
69.   		DSA_SIG *sig;
70. > 		sig = OPENSSL_malloc(sizeof(DSA_SIG));
71.   		sig->r = NULL;
72.   		sig->s = NULL;

crypto/mem.c:289:1: start of procedure CRYPTO_malloc()
  287.   	}
  288.   
  289. > void *CRYPTO_malloc(int num, const char *file, int line)
  290.   	{
  291.   	void *ret = NULL;

crypto/mem.c:291:2: 
  289.   void *CRYPTO_malloc(int num, const char *file, int line)
  290.   	{
  291. > 	void *ret = NULL;
  292.   	extern unsigned char cleanse_ctr;
  293.   

crypto/mem.c:294:2: 
  292.   	extern unsigned char cleanse_ctr;
  293.   
  294. > 	allow_customize = 0;
  295.   	if (malloc_debug_func != NULL)
  296.   		{

crypto/mem.c:295:6: Taking true branch
  293.   
  294.   	allow_customize = 0;
  295.   	if (malloc_debug_func != NULL)
              ^
  296.   		{
  297.   		allow_customize_debug = 0;

crypto/mem.c:297:3: 
  295.   	if (malloc_debug_func != NULL)
  296.   		{
  297. > 		allow_customize_debug = 0;
  298.   		malloc_debug_func(NULL, num, file, line, 0);
  299.   		}

crypto/mem.c:298:3: Skipping __function_pointer__(): unresolved function pointer
  296.   		{
  297.   		allow_customize_debug = 0;
  298.   		malloc_debug_func(NULL, num, file, line, 0);
           ^
  299.   		}
  300.   	ret = malloc_ex_func(num,file,line);

crypto/mem.c:300:2: Skipping __function_pointer__(): unresolved function pointer
  298.   		malloc_debug_func(NULL, num, file, line, 0);
  299.   		}
  300.   	ret = malloc_ex_func(num,file,line);
          ^
  301.   #ifdef LEVITTE_DEBUG_MEM
  302.   	fprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\n", ret, num);

crypto/mem.c:304:6: Taking true branch
  302.   	fprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\n", ret, num);
  303.   #endif
  304.   	if (malloc_debug_func != NULL)
              ^
  305.   		malloc_debug_func(ret, num, file, line, 1);
  306.   

crypto/mem.c:305:3: Skipping __function_pointer__(): unresolved function pointer
  303.   #endif
  304.   	if (malloc_debug_func != NULL)
  305.   		malloc_debug_func(ret, num, file, line, 1);
           ^
  306.   
  307.           /* Create a dependency on the value of 'cleanse_ctr' so our memory

crypto/mem.c:310:12: Taking false branch
  308.            * sanitisation function can't be optimised out. NB: We only do
  309.            * this for >2Kb so the overhead doesn't bother us. */
  310.           if(ret && (num > 2048))
                    ^
  311.                   ((unsigned char *)ret)[0] = cleanse_ctr;
  312.   

crypto/mem.c:313:2: 
  311.                   ((unsigned char *)ret)[0] = cleanse_ctr;
  312.   
  313. > 	return ret;
  314.   	}
  315.   

crypto/mem.c:314:2: return from a call to CRYPTO_malloc
  312.   
  313.   	return ret;
  314.   	}
          ^
  315.   
  316.   void *CRYPTO_realloc(void *str, int num, const char *file, int line)

crypto/dsa/dsa_asn1.c:71:3: 
69.   		DSA_SIG *sig;
70.   		sig = OPENSSL_malloc(sizeof(DSA_SIG));
71. > 		sig->r = NULL;
72.   		sig->s = NULL;
73.   		*pval = (ASN1_VALUE *)sig;

static int sig_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it)
{
	if(operation == ASN1_OP_NEW_PRE) {
		DSA_SIG *sig;
		sig = OPENSSL_malloc(sizeof(DSA_SIG));
		sig->r = NULL;
		sig->s = NULL;
		*pval = (ASN1_VALUE *)sig;
		if(sig) return 2;
		DSAerr(DSA_F_SIG_CB, ERR_R_MALLOC_FAILURE);
		return 0;
	}
	return 1;
}
['static int sig_cb(int operation, ASN1_VALUE **pval, const ASN1_ITEM *it)\n{\n\tif(operation == ASN1_OP_NEW_PRE) {\n\t\tDSA_SIG *sig;\n\t\tsig = OPENSSL_malloc(sizeof(DSA_SIG));\n\t\tsig->r = NULL;\n\t\tsig->s = NULL;\n\t\t*pval = (ASN1_VALUE *)sig;\n\t\tif(sig) return 2;\n\t\tDSAerr(DSA_F_SIG_CB, ERR_R_MALLOC_FAILURE);\n\t\treturn 0;\n\t}\n\treturn 1;\n}', 'void *CRYPTO_malloc(int num, const char *file, int line)\n\t{\n\tvoid *ret = NULL;\n\textern unsigned char cleanse_ctr;\n\tallow_customize = 0;\n\tif (malloc_debug_func != NULL)\n\t\t{\n\t\tallow_customize_debug = 0;\n\t\tmalloc_debug_func(NULL, num, file, line, 0);\n\t\t}\n\tret = malloc_ex_func(num,file,line);\n#ifdef LEVITTE_DEBUG_MEM\n\tfprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\\n", ret, num);\n#endif\n\tif (malloc_debug_func != NULL)\n\t\tmalloc_debug_func(ret, num, file, line, 1);\n        if(ret && (num > 2048))\n                ((unsigned char *)ret)[0] = cleanse_ctr;\n\treturn ret;\n\t}']