crypto/cms/cms_sd.c:847: error: MEMORY_LEAK
  memory dynamically allocated by call to `EVP_MD_CTX_new()` at line 778, column 24 is not reachable after line 847, column 5.
Showing all 104 steps of the trace


crypto/cms/cms_sd.c:775:1: start of procedure CMS_SignerInfo_verify_content()
773.   }
774.   
775. > int CMS_SignerInfo_verify_content(CMS_SignerInfo *si, BIO *chain)
776.   {
777.       ASN1_OCTET_STRING *os = NULL;

crypto/cms/cms_sd.c:777:5: 
775.   int CMS_SignerInfo_verify_content(CMS_SignerInfo *si, BIO *chain)
776.   {
777. >     ASN1_OCTET_STRING *os = NULL;
778.       EVP_MD_CTX *mctx = EVP_MD_CTX_new();
779.       EVP_PKEY_CTX *pkctx = NULL;

crypto/cms/cms_sd.c:778:5: 
776.   {
777.       ASN1_OCTET_STRING *os = NULL;
778. >     EVP_MD_CTX *mctx = EVP_MD_CTX_new();
779.       EVP_PKEY_CTX *pkctx = NULL;
780.       int r = -1;

crypto/evp/digest.c:44:1: start of procedure EVP_MD_CTX_new()
  42.   }
  43.   
  44. > EVP_MD_CTX *EVP_MD_CTX_new(void)
  45.   {
  46.       return OPENSSL_zalloc(sizeof(EVP_MD_CTX));

crypto/evp/digest.c:46:5: 
  44.   EVP_MD_CTX *EVP_MD_CTX_new(void)
  45.   {
  46. >     return OPENSSL_zalloc(sizeof(EVP_MD_CTX));
  47.   }
  48.   

crypto/mem.c:198:1: start of procedure CRYPTO_zalloc()
    196.   }
    197.   
    198. > void *CRYPTO_zalloc(size_t num, const char *file, int line)
    199.   {
    200.       void *ret = CRYPTO_malloc(num, file, line);

crypto/mem.c:200:5: 
    198.   void *CRYPTO_zalloc(size_t num, const char *file, int line)
    199.   {
    200. >     void *ret = CRYPTO_malloc(num, file, line);
    201.   
    202.       FAILTEST();

crypto/mem.c:170:1: start of procedure CRYPTO_malloc()
      168.   #endif
      169.   
      170. > void *CRYPTO_malloc(size_t num, const char *file, int line)
      171.   {
      172.       void *ret = NULL;

crypto/mem.c:172:5: 
      170.   void *CRYPTO_malloc(size_t num, const char *file, int line)
      171.   {
      172. >     void *ret = NULL;
      173.   
      174.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)

crypto/mem.c:174:9: Taking false branch
      172.       void *ret = NULL;
      173.   
      174.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
                     ^
      175.           return malloc_impl(num, file, line);
      176.   

crypto/mem.c:177:9: Taking false branch
      175.           return malloc_impl(num, file, line);
      176.   
      177.       if (num == 0)
                     ^
      178.           return NULL;
      179.   

crypto/mem.c:181:5: 
      179.   
      180.       FAILTEST();
      181. >     allow_customize = 0;
      182.   #ifndef OPENSSL_NO_CRYPTO_MDEBUG
      183.       if (call_malloc_debug) {

crypto/mem.c:191:5: 
      189.       }
      190.   #else
      191. >     (void)(file); (void)(line);
      192.       ret = malloc(num);
      193.   #endif

crypto/mem.c:191:19: 
      189.       }
      190.   #else
      191. >     (void)(file); (void)(line);
      192.       ret = malloc(num);
      193.   #endif

crypto/mem.c:192:5: 
      190.   #else
      191.       (void)(file); (void)(line);
      192. >     ret = malloc(num);
      193.   #endif
      194.   

crypto/mem.c:195:5: 
      193.   #endif
      194.   
      195. >     return ret;
      196.   }
      197.   

crypto/mem.c:196:1: return from a call to CRYPTO_malloc
      194.   
      195.       return ret;
      196. > }
      197.   
      198.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

crypto/mem.c:203:9: Taking true branch
    201.   
    202.       FAILTEST();
    203.       if (ret != NULL)
                   ^
    204.           memset(ret, 0, num);
    205.       return ret;

crypto/mem.c:204:9: 
    202.       FAILTEST();
    203.       if (ret != NULL)
    204. >         memset(ret, 0, num);
    205.       return ret;
    206.   }

crypto/mem.c:205:5: 
    203.       if (ret != NULL)
    204.           memset(ret, 0, num);
    205. >     return ret;
    206.   }
    207.   

crypto/mem.c:206:1: return from a call to CRYPTO_zalloc
    204.           memset(ret, 0, num);
    205.       return ret;
    206. > }
    207.   
    208.   void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)

crypto/evp/digest.c:47:1: return from a call to EVP_MD_CTX_new
  45.   {
  46.       return OPENSSL_zalloc(sizeof(EVP_MD_CTX));
  47. > }
  48.   
  49.   void EVP_MD_CTX_free(EVP_MD_CTX *ctx)

crypto/cms/cms_sd.c:779:5: 
777.       ASN1_OCTET_STRING *os = NULL;
778.       EVP_MD_CTX *mctx = EVP_MD_CTX_new();
779. >     EVP_PKEY_CTX *pkctx = NULL;
780.       int r = -1;
781.       unsigned char mval[EVP_MAX_MD_SIZE];

crypto/cms/cms_sd.c:780:5: 
778.       EVP_MD_CTX *mctx = EVP_MD_CTX_new();
779.       EVP_PKEY_CTX *pkctx = NULL;
780. >     int r = -1;
781.       unsigned char mval[EVP_MAX_MD_SIZE];
782.       unsigned int mlen;

crypto/cms/cms_sd.c:784:9: Taking false branch
782.       unsigned int mlen;
783.   
784.       if (mctx == NULL) {
               ^
785.           CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT, ERR_R_MALLOC_FAILURE);
786.           goto err;

crypto/cms/cms_sd.c:789:9: 
787.       }
788.       /* If we have any signed attributes look for messageDigest value */
789. >     if (CMS_signed_get_attr_count(si) >= 0) {
790.           os = CMS_signed_get0_data_by_OBJ(si,
791.                                            OBJ_nid2obj(NID_pkcs9_messageDigest),

crypto/cms/cms_att.c:19:1: start of procedure CMS_signed_get_attr_count()
  17.   /* CMS SignedData Attribute utilities */
  18.   
  19. > int CMS_signed_get_attr_count(const CMS_SignerInfo *si)
  20.   {
  21.       return X509at_get_attr_count(si->signedAttrs);

crypto/cms/cms_att.c:21:5: 
  19.   int CMS_signed_get_attr_count(const CMS_SignerInfo *si)
  20.   {
  21. >     return X509at_get_attr_count(si->signedAttrs);
  22.   }
  23.   

crypto/x509/x509_att.c:20:1: start of procedure X509at_get_attr_count()
    18.   #include "x509_lcl.h"
    19.   
    20. > int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x)
    21.   {
    22.       return sk_X509_ATTRIBUTE_num(x);

crypto/x509/x509_att.c:22:5: 
    20.   int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x)
    21.   {
    22. >     return sk_X509_ATTRIBUTE_num(x);
    23.   }
    24.   

include/openssl/x509.h:89:1: start of procedure sk_X509_ATTRIBUTE_num()
      87.   typedef struct x509_attributes_st X509_ATTRIBUTE;
      88.   
      89. > DEFINE_STACK_OF(X509_ATTRIBUTE)
      90.   
      91.   typedef struct X509_req_info_st X509_REQ_INFO;

crypto/stack/stack.c:359:1: start of procedure OPENSSL_sk_num()
        357.   }
        358.   
        359. > int OPENSSL_sk_num(const OPENSSL_STACK *st)
        360.   {
        361.       return st == NULL ? -1 : st->num;

crypto/stack/stack.c:361:12: Condition is true
        359.   int OPENSSL_sk_num(const OPENSSL_STACK *st)
        360.   {
        361.       return st == NULL ? -1 : st->num;
                          ^
        362.   }
        363.   

crypto/stack/stack.c:361:5: 
        359.   int OPENSSL_sk_num(const OPENSSL_STACK *st)
        360.   {
        361. >     return st == NULL ? -1 : st->num;
        362.   }
        363.   

crypto/stack/stack.c:362:1: return from a call to OPENSSL_sk_num
        360.   {
        361.       return st == NULL ? -1 : st->num;
        362. > }
        363.   
        364.   void *OPENSSL_sk_value(const OPENSSL_STACK *st, int i)

include/openssl/x509.h:89:1: return from a call to sk_X509_ATTRIBUTE_num
      87.   typedef struct x509_attributes_st X509_ATTRIBUTE;
      88.   
      89. > DEFINE_STACK_OF(X509_ATTRIBUTE)
      90.   
      91.   typedef struct X509_req_info_st X509_REQ_INFO;

crypto/x509/x509_att.c:23:1: return from a call to X509at_get_attr_count
    21.   {
    22.       return sk_X509_ATTRIBUTE_num(x);
    23. > }
    24.   
    25.   int X509at_get_attr_by_NID(const STACK_OF(X509_ATTRIBUTE) *x, int nid,

crypto/cms/cms_att.c:22:1: return from a call to CMS_signed_get_attr_count
  20.   {
  21.       return X509at_get_attr_count(si->signedAttrs);
  22. > }
  23.   
  24.   int CMS_signed_get_attr_by_NID(const CMS_SignerInfo *si, int nid, int lastpos)

crypto/cms/cms_sd.c:789:9: Taking false branch
787.       }
788.       /* If we have any signed attributes look for messageDigest value */
789.       if (CMS_signed_get_attr_count(si) >= 0) {
               ^
790.           os = CMS_signed_get0_data_by_OBJ(si,
791.                                            OBJ_nid2obj(NID_pkcs9_messageDigest),

crypto/cms/cms_sd.c:800:10: 
798.       }
799.   
800. >     if (!cms_DigestAlgorithm_find_ctx(mctx, chain, si->digestAlgorithm))
801.           goto err;
802.   

crypto/cms/cms_lib.c:311:1: start of procedure cms_DigestAlgorithm_find_ctx()
  309.   /* Locate a message digest content from a BIO chain based on SignerInfo */
  310.   
  311. > int cms_DigestAlgorithm_find_ctx(EVP_MD_CTX *mctx, BIO *chain,
  312.                                    X509_ALGOR *mdalg)
  313.   {

crypto/cms/cms_lib.c:316:5: 
  314.       int nid;
  315.       const ASN1_OBJECT *mdoid;
  316. >     X509_ALGOR_get0(&mdoid, NULL, NULL, mdalg);
  317.       nid = OBJ_obj2nid(mdoid);
  318.       /* Look for digest type to match signature */

crypto/asn1/x_algor.c:53:1: start of procedure X509_ALGOR_get0()
    51.   }
    52.   
    53. > void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,
    54.                        const void **ppval, const X509_ALGOR *algor)
    55.   {

crypto/asn1/x_algor.c:56:9: Taking true branch
    54.                        const void **ppval, const X509_ALGOR *algor)
    55.   {
    56.       if (paobj)
                  ^
    57.           *paobj = algor->algorithm;
    58.       if (pptype) {

crypto/asn1/x_algor.c:57:9: 
    55.   {
    56.       if (paobj)
    57. >         *paobj = algor->algorithm;
    58.       if (pptype) {
    59.           if (algor->parameter == NULL) {

crypto/asn1/x_algor.c:58:9: Taking false branch
    56.       if (paobj)
    57.           *paobj = algor->algorithm;
    58.       if (pptype) {
                  ^
    59.           if (algor->parameter == NULL) {
    60.               *pptype = V_ASN1_UNDEF;

crypto/asn1/x_algor.c:58:5: 
    56.       if (paobj)
    57.           *paobj = algor->algorithm;
    58. >     if (pptype) {
    59.           if (algor->parameter == NULL) {
    60.               *pptype = V_ASN1_UNDEF;

crypto/asn1/x_algor.c:67:1: return from a call to X509_ALGOR_get0
    65.               *ppval = algor->parameter->value.ptr;
    66.       }
    67. > }
    68.   
    69.   /* Set up an X509_ALGOR DigestAlgorithmIdentifier from an EVP_MD */

crypto/cms/cms_lib.c:317:5: 
  315.       const ASN1_OBJECT *mdoid;
  316.       X509_ALGOR_get0(&mdoid, NULL, NULL, mdalg);
  317. >     nid = OBJ_obj2nid(mdoid);
  318.       /* Look for digest type to match signature */
  319.       for (;;) {

crypto/objects/obj_dat.c:317:1: start of procedure OBJ_obj2nid()
    315.   IMPLEMENT_OBJ_BSEARCH_CMP_FN(const ASN1_OBJECT *, unsigned int, obj);
    316.   
    317. > int OBJ_obj2nid(const ASN1_OBJECT *a)
    318.   {
    319.       const unsigned int *op;

crypto/objects/obj_dat.c:322:9: Taking false branch
    320.       ADDED_OBJ ad, *adp;
    321.   
    322.       if (a == NULL)
                   ^
    323.           return NID_undef;
    324.       if (a->nid != 0)

crypto/objects/obj_dat.c:324:9: Taking false branch
    322.       if (a == NULL)
    323.           return NID_undef;
    324.       if (a->nid != 0)
                   ^
    325.           return a->nid;
    326.   

crypto/objects/obj_dat.c:327:9: Taking false branch
    325.           return a->nid;
    326.   
    327.       if (a->length == 0)
                   ^
    328.           return NID_undef;
    329.   

crypto/objects/obj_dat.c:330:9: Taking true branch
    328.           return NID_undef;
    329.   
    330.       if (added != NULL) {
                   ^
    331.           ad.type = ADDED_DATA;
    332.           ad.obj = (ASN1_OBJECT *)a; /* XXX: ugly but harmless */

crypto/objects/obj_dat.c:331:9: 
    329.   
    330.       if (added != NULL) {
    331. >         ad.type = ADDED_DATA;
    332.           ad.obj = (ASN1_OBJECT *)a; /* XXX: ugly but harmless */
    333.           adp = lh_ADDED_OBJ_retrieve(added, &ad);

crypto/objects/obj_dat.c:332:9: 
    330.       if (added != NULL) {
    331.           ad.type = ADDED_DATA;
    332. >         ad.obj = (ASN1_OBJECT *)a; /* XXX: ugly but harmless */
    333.           adp = lh_ADDED_OBJ_retrieve(added, &ad);
    334.           if (adp != NULL)

crypto/objects/obj_dat.c:333:9: 
    331.           ad.type = ADDED_DATA;
    332.           ad.obj = (ASN1_OBJECT *)a; /* XXX: ugly but harmless */
    333. >         adp = lh_ADDED_OBJ_retrieve(added, &ad);
    334.           if (adp != NULL)
    335.               return adp->obj->nid;

crypto/objects/obj_lcl.h:14:1: start of procedure lh_ADDED_OBJ_retrieve()
      12.   DEFINE_LHASH_OF(OBJ_NAME);
      13.   typedef struct added_obj_st ADDED_OBJ;
      14. > DEFINE_LHASH_OF(ADDED_OBJ);

crypto/lhash/lhash.c:134:1: start of procedure OPENSSL_LH_retrieve()
        132.   }
        133.   
        134. > void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data)
        135.   {
        136.       unsigned long hash;

crypto/lhash/lhash.c:141:5: 
        139.       int scratch;
        140.   
        141. >     lh->error = 0;
        142.       rn = getrn(lh, data, &hash);
        143.   

crypto/lhash/lhash.c:142:5: Skipping getrn(): empty list of specs
        140.   
        141.       lh->error = 0;
        142.       rn = getrn(lh, data, &hash);
                   ^
        143.   
        144.       if (*rn == NULL) {

crypto/lhash/lhash.c:144:9: Taking false branch
        142.       rn = getrn(lh, data, &hash);
        143.   
        144.       if (*rn == NULL) {
                       ^
        145.           CRYPTO_atomic_add(&lh->num_retrieve_miss, 1, &scratch, lh->retrieve_stats_lock);
        146.           return NULL;

crypto/lhash/lhash.c:148:9: 
        146.           return NULL;
        147.       } else {
        148. >         ret = (*rn)->data;
        149.           CRYPTO_atomic_add(&lh->num_retrieve, 1, &scratch, lh->retrieve_stats_lock);
        150.       }

crypto/lhash/lhash.c:149:9: 
        147.       } else {
        148.           ret = (*rn)->data;
        149. >         CRYPTO_atomic_add(&lh->num_retrieve, 1, &scratch, lh->retrieve_stats_lock);
        150.       }
        151.       return ret;

crypto/threads_pthread.c:152:1: start of procedure CRYPTO_atomic_add()
          150.   }
          151.   
          152. > int CRYPTO_atomic_add(int *val, int amount, int *ret, CRYPTO_RWLOCK *lock)
          153.   {
          154.   # if defined(__GNUC__) && defined(__ATOMIC_ACQ_REL)

crypto/threads_pthread.c:155:9: Taking false branch
          153.   {
          154.   # if defined(__GNUC__) && defined(__ATOMIC_ACQ_REL)
          155.       if (__atomic_is_lock_free(sizeof(*val), val)) {
                         ^
          156.           *ret = __atomic_add_fetch(val, amount, __ATOMIC_ACQ_REL);
          157.           return 1;

crypto/threads_pthread.c:160:10: 
          158.       }
          159.   # endif
          160. >     if (!CRYPTO_THREAD_write_lock(lock))
          161.           return 0;
          162.   

crypto/threads_pthread.c:64:1: start of procedure CRYPTO_THREAD_write_lock()
            62.   }
            63.   
            64. > int CRYPTO_THREAD_write_lock(CRYPTO_RWLOCK *lock)
            65.   {
            66.   # ifdef USE_RWLOCK

crypto/threads_pthread.c:67:9: Taking true branch
            65.   {
            66.   # ifdef USE_RWLOCK
            67.       if (pthread_rwlock_wrlock(lock) != 0)
                          ^
            68.           return 0;
            69.   # else

crypto/threads_pthread.c:68:9: 
            66.   # ifdef USE_RWLOCK
            67.       if (pthread_rwlock_wrlock(lock) != 0)
            68. >         return 0;
            69.   # else
            70.       if (pthread_mutex_lock(lock) != 0)

crypto/threads_pthread.c:75:1: return from a call to CRYPTO_THREAD_write_lock
            73.   
            74.       return 1;
            75. > }
            76.   
            77.   int CRYPTO_THREAD_unlock(CRYPTO_RWLOCK *lock)

crypto/threads_pthread.c:160:10: Taking true branch
          158.       }
          159.   # endif
          160.       if (!CRYPTO_THREAD_write_lock(lock))
                          ^
          161.           return 0;
          162.   

crypto/threads_pthread.c:161:9: 
          159.   # endif
          160.       if (!CRYPTO_THREAD_write_lock(lock))
          161. >         return 0;
          162.   
          163.       *val += amount;

crypto/threads_pthread.c:170:1: return from a call to CRYPTO_atomic_add
          168.   
          169.       return 1;
          170. > }
          171.   
          172.   # ifdef OPENSSL_SYS_UNIX

crypto/lhash/lhash.c:151:5: 
        149.           CRYPTO_atomic_add(&lh->num_retrieve, 1, &scratch, lh->retrieve_stats_lock);
        150.       }
        151. >     return ret;
        152.   }
        153.   

crypto/lhash/lhash.c:152:1: return from a call to OPENSSL_LH_retrieve
        150.       }
        151.       return ret;
        152. > }
        153.   
        154.   static void doall_util_fn(OPENSSL_LHASH *lh, int use_arg,

crypto/objects/obj_lcl.h:14:1: return from a call to lh_ADDED_OBJ_retrieve
      12.   DEFINE_LHASH_OF(OBJ_NAME);
      13.   typedef struct added_obj_st ADDED_OBJ;
      14. > DEFINE_LHASH_OF(ADDED_OBJ);

crypto/objects/obj_dat.c:334:13: Taking true branch
    332.           ad.obj = (ASN1_OBJECT *)a; /* XXX: ugly but harmless */
    333.           adp = lh_ADDED_OBJ_retrieve(added, &ad);
    334.           if (adp != NULL)
                       ^
    335.               return adp->obj->nid;
    336.       }

crypto/objects/obj_dat.c:335:13: 
    333.           adp = lh_ADDED_OBJ_retrieve(added, &ad);
    334.           if (adp != NULL)
    335. >             return adp->obj->nid;
    336.       }
    337.       op = OBJ_bsearch_obj(&a, obj_objs, NUM_OBJ);

crypto/objects/obj_dat.c:341:1: return from a call to OBJ_obj2nid
    339.           return NID_undef;
    340.       return nid_objs[*op].nid;
    341. > }
    342.   
    343.   /*

crypto/cms/cms_lib.c:336:5: Loop condition is true. Entering loop body
  334.               return EVP_MD_CTX_copy_ex(mctx, mtmp);
  335.           chain = BIO_next(chain);
  336.       }
             ^
  337.   }
  338.   

crypto/cms/cms_lib.c:321:9: Skipping BIO_find_type(): empty list of specs
  319.       for (;;) {
  320.           EVP_MD_CTX *mtmp;
  321.           chain = BIO_find_type(chain, BIO_TYPE_MD);
                 ^
  322.           if (chain == NULL) {
  323.               CMSerr(CMS_F_CMS_DIGESTALGORITHM_FIND_CTX,

crypto/cms/cms_lib.c:322:13: Taking true branch
  320.           EVP_MD_CTX *mtmp;
  321.           chain = BIO_find_type(chain, BIO_TYPE_MD);
  322.           if (chain == NULL) {
                     ^
  323.               CMSerr(CMS_F_CMS_DIGESTALGORITHM_FIND_CTX,
  324.                      CMS_R_NO_MATCHING_DIGEST);

crypto/cms/cms_lib.c:323:13: Skipping ERR_put_error(): empty list of specs
  321.           chain = BIO_find_type(chain, BIO_TYPE_MD);
  322.           if (chain == NULL) {
  323.               CMSerr(CMS_F_CMS_DIGESTALGORITHM_FIND_CTX,
                     ^
  324.                      CMS_R_NO_MATCHING_DIGEST);
  325.               return 0;

crypto/cms/cms_lib.c:325:13: 
  323.               CMSerr(CMS_F_CMS_DIGESTALGORITHM_FIND_CTX,
  324.                      CMS_R_NO_MATCHING_DIGEST);
  325. >             return 0;
  326.           }
  327.           BIO_get_md_ctx(chain, &mtmp);

crypto/cms/cms_lib.c:337:1: return from a call to cms_DigestAlgorithm_find_ctx
  335.           chain = BIO_next(chain);
  336.       }
  337. > }
  338.   
  339.   static STACK_OF(CMS_CertificateChoices)

crypto/cms/cms_sd.c:800:10: Taking true branch
798.       }
799.   
800.       if (!cms_DigestAlgorithm_find_ctx(mctx, chain, si->digestAlgorithm))
                ^
801.           goto err;
802.   

crypto/cms/cms_sd.c:845:2: 
843.       }
844.   
845. >  err:
846.       EVP_PKEY_CTX_free(pkctx);
847.       EVP_MD_CTX_free(mctx);

crypto/cms/cms_sd.c:846:5: 
844.   
845.    err:
846. >     EVP_PKEY_CTX_free(pkctx);
847.       EVP_MD_CTX_free(mctx);
848.       return r;

crypto/evp/pmeth_lib.c:335:1: start of procedure EVP_PKEY_CTX_free()
  333.   }
  334.   
  335. > void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx)
  336.   {
  337.       if (ctx == NULL)

crypto/evp/pmeth_lib.c:337:9: Taking true branch
  335.   void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx)
  336.   {
  337.       if (ctx == NULL)
                 ^
  338.           return;
  339.       if (ctx->pmeth && ctx->pmeth->cleanup)

crypto/evp/pmeth_lib.c:338:9: 
  336.   {
  337.       if (ctx == NULL)
  338. >         return;
  339.       if (ctx->pmeth && ctx->pmeth->cleanup)
  340.           ctx->pmeth->cleanup(ctx);

crypto/evp/pmeth_lib.c:347:1: return from a call to EVP_PKEY_CTX_free
  345.   #endif
  346.       OPENSSL_free(ctx);
  347. > }
  348.   
  349.   int EVP_PKEY_CTX_ctrl(EVP_PKEY_CTX *ctx, int keytype, int optype,

crypto/cms/cms_sd.c:847:5: 
845.    err:
846.       EVP_PKEY_CTX_free(pkctx);
847. >     EVP_MD_CTX_free(mctx);
848.       return r;
849.   

crypto/evp/digest.c:49:1: start of procedure EVP_MD_CTX_free()
  47.   }
  48.   
  49. > void EVP_MD_CTX_free(EVP_MD_CTX *ctx)
  50.   {
  51.       EVP_MD_CTX_reset(ctx);

crypto/evp/digest.c:51:5: Skipping EVP_MD_CTX_reset(): empty list of specs
  49.   void EVP_MD_CTX_free(EVP_MD_CTX *ctx)
  50.   {
  51.       EVP_MD_CTX_reset(ctx);
            ^
  52.       OPENSSL_free(ctx);
  53.   }

crypto/evp/digest.c:52:5: 
  50.   {
  51.       EVP_MD_CTX_reset(ctx);
  52. >     OPENSSL_free(ctx);
  53.   }
  54.   

crypto/mem.c:265:1: start of procedure CRYPTO_free()
    263.   }
    264.   
    265. > void CRYPTO_free(void *str, const char *file, int line)
    266.   {
    267.       if (free_impl != NULL && free_impl != &CRYPTO_free) {

crypto/mem.c:267:9: Taking true branch
    265.   void CRYPTO_free(void *str, const char *file, int line)
    266.   {
    267.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
                   ^
    268.           free_impl(str, file, line);
    269.           return;

crypto/mem.c:267:30: Taking true branch
    265.   void CRYPTO_free(void *str, const char *file, int line)
    266.   {
    267.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
                                        ^
    268.           free_impl(str, file, line);
    269.           return;

crypto/mem.c:268:9: Skipping __function_pointer__(): unresolved function pointer
    266.   {
    267.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
    268.           free_impl(str, file, line);
                   ^
    269.           return;
    270.       }

crypto/mem.c:269:9: 
    267.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
    268.           free_impl(str, file, line);
    269. >         return;
    270.       }
    271.   

crypto/mem.c:283:1: return from a call to CRYPTO_free
    281.       free(str);
    282.   #endif
    283. > }
    284.   
    285.   void CRYPTO_clear_free(void *str, size_t num, const char *file, int line)

crypto/evp/digest.c:53:1: return from a call to EVP_MD_CTX_free
  51.       EVP_MD_CTX_reset(ctx);
  52.       OPENSSL_free(ctx);
  53. > }
  54.   
  55.   int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type)

int CMS_SignerInfo_verify_content(CMS_SignerInfo *si, BIO *chain)
{
    ASN1_OCTET_STRING *os = NULL;
    EVP_MD_CTX *mctx = EVP_MD_CTX_new();
    EVP_PKEY_CTX *pkctx = NULL;
    int r = -1;
    unsigned char mval[EVP_MAX_MD_SIZE];
    unsigned int mlen;
    if (mctx == NULL) {
        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT, ERR_R_MALLOC_FAILURE);
        goto err;
    }
    if (CMS_signed_get_attr_count(si) >= 0) {
        os = CMS_signed_get0_data_by_OBJ(si,
                                         OBJ_nid2obj(NID_pkcs9_messageDigest),
                                         -3, V_ASN1_OCTET_STRING);
        if (!os) {
            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
                   CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE);
            goto err;
        }
    }
    if (!cms_DigestAlgorithm_find_ctx(mctx, chain, si->digestAlgorithm))
        goto err;
    if (EVP_DigestFinal_ex(mctx, mval, &mlen) <= 0) {
        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
               CMS_R_UNABLE_TO_FINALIZE_CONTEXT);
        goto err;
    }
    if (os) {
        if (mlen != (unsigned int)os->length) {
            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
                   CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH);
            goto err;
        }
        if (memcmp(mval, os->data, mlen)) {
            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
                   CMS_R_VERIFICATION_FAILURE);
            r = 0;
        } else
            r = 1;
    } else {
        const EVP_MD *md = EVP_MD_CTX_md(mctx);
        pkctx = EVP_PKEY_CTX_new(si->pkey, NULL);
        if (pkctx == NULL)
            goto err;
        if (EVP_PKEY_verify_init(pkctx) <= 0)
            goto err;
        if (EVP_PKEY_CTX_set_signature_md(pkctx, md) <= 0)
            goto err;
        si->pctx = pkctx;
        if (!cms_sd_asn1_ctrl(si, 1))
            goto err;
        r = EVP_PKEY_verify(pkctx, si->signature->data,
                            si->signature->length, mval, mlen);
        if (r <= 0) {
            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,
                   CMS_R_VERIFICATION_FAILURE);
            r = 0;
        }
    }
 err:
    EVP_PKEY_CTX_free(pkctx);
    EVP_MD_CTX_free(mctx);
    return r;
}
['int CMS_SignerInfo_verify_content(CMS_SignerInfo *si, BIO *chain)\n{\n    ASN1_OCTET_STRING *os = NULL;\n    EVP_MD_CTX *mctx = EVP_MD_CTX_new();\n    EVP_PKEY_CTX *pkctx = NULL;\n    int r = -1;\n    unsigned char mval[EVP_MAX_MD_SIZE];\n    unsigned int mlen;\n    if (mctx == NULL) {\n        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT, ERR_R_MALLOC_FAILURE);\n        goto err;\n    }\n    if (CMS_signed_get_attr_count(si) >= 0) {\n        os = CMS_signed_get0_data_by_OBJ(si,\n                                         OBJ_nid2obj(NID_pkcs9_messageDigest),\n                                         -3, V_ASN1_OCTET_STRING);\n        if (!os) {\n            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,\n                   CMS_R_ERROR_READING_MESSAGEDIGEST_ATTRIBUTE);\n            goto err;\n        }\n    }\n    if (!cms_DigestAlgorithm_find_ctx(mctx, chain, si->digestAlgorithm))\n        goto err;\n    if (EVP_DigestFinal_ex(mctx, mval, &mlen) <= 0) {\n        CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,\n               CMS_R_UNABLE_TO_FINALIZE_CONTEXT);\n        goto err;\n    }\n    if (os) {\n        if (mlen != (unsigned int)os->length) {\n            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,\n                   CMS_R_MESSAGEDIGEST_ATTRIBUTE_WRONG_LENGTH);\n            goto err;\n        }\n        if (memcmp(mval, os->data, mlen)) {\n            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,\n                   CMS_R_VERIFICATION_FAILURE);\n            r = 0;\n        } else\n            r = 1;\n    } else {\n        const EVP_MD *md = EVP_MD_CTX_md(mctx);\n        pkctx = EVP_PKEY_CTX_new(si->pkey, NULL);\n        if (pkctx == NULL)\n            goto err;\n        if (EVP_PKEY_verify_init(pkctx) <= 0)\n            goto err;\n        if (EVP_PKEY_CTX_set_signature_md(pkctx, md) <= 0)\n            goto err;\n        si->pctx = pkctx;\n        if (!cms_sd_asn1_ctrl(si, 1))\n            goto err;\n        r = EVP_PKEY_verify(pkctx, si->signature->data,\n                            si->signature->length, mval, mlen);\n        if (r <= 0) {\n            CMSerr(CMS_F_CMS_SIGNERINFO_VERIFY_CONTENT,\n                   CMS_R_VERIFICATION_FAILURE);\n            r = 0;\n        }\n    }\n err:\n    EVP_PKEY_CTX_free(pkctx);\n    EVP_MD_CTX_free(mctx);\n    return r;\n}', 'EVP_MD_CTX *EVP_MD_CTX_new(void)\n{\n    return OPENSSL_zalloc(sizeof(EVP_MD_CTX));\n}', 'void *CRYPTO_zalloc(size_t num, const char *file, int line)\n{\n    void *ret = CRYPTO_malloc(num, file, line);\n    FAILTEST();\n    if (ret != NULL)\n        memset(ret, 0, num);\n    return ret;\n}', 'void *CRYPTO_malloc(size_t num, const char *file, int line)\n{\n    void *ret = NULL;\n    if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)\n        return malloc_impl(num, file, line);\n    if (num == 0)\n        return NULL;\n    FAILTEST();\n    allow_customize = 0;\n#ifndef OPENSSL_NO_CRYPTO_MDEBUG\n    if (call_malloc_debug) {\n        CRYPTO_mem_debug_malloc(NULL, num, 0, file, line);\n        ret = malloc(num);\n        CRYPTO_mem_debug_malloc(ret, num, 1, file, line);\n    } else {\n        ret = malloc(num);\n    }\n#else\n    (void)(file); (void)(line);\n    ret = malloc(num);\n#endif\n    return ret;\n}', 'int CMS_signed_get_attr_count(const CMS_SignerInfo *si)\n{\n    return X509at_get_attr_count(si->signedAttrs);\n}', 'int X509at_get_attr_count(const STACK_OF(X509_ATTRIBUTE) *x)\n{\n    return sk_X509_ATTRIBUTE_num(x);\n}', 'int OPENSSL_sk_num(const OPENSSL_STACK *st)\n{\n    return st == NULL ? -1 : st->num;\n}', 'int cms_DigestAlgorithm_find_ctx(EVP_MD_CTX *mctx, BIO *chain,\n                                 X509_ALGOR *mdalg)\n{\n    int nid;\n    const ASN1_OBJECT *mdoid;\n    X509_ALGOR_get0(&mdoid, NULL, NULL, mdalg);\n    nid = OBJ_obj2nid(mdoid);\n    for (;;) {\n        EVP_MD_CTX *mtmp;\n        chain = BIO_find_type(chain, BIO_TYPE_MD);\n        if (chain == NULL) {\n            CMSerr(CMS_F_CMS_DIGESTALGORITHM_FIND_CTX,\n                   CMS_R_NO_MATCHING_DIGEST);\n            return 0;\n        }\n        BIO_get_md_ctx(chain, &mtmp);\n        if (EVP_MD_CTX_type(mtmp) == nid\n            || EVP_MD_pkey_type(EVP_MD_CTX_md(mtmp)) == nid)\n            return EVP_MD_CTX_copy_ex(mctx, mtmp);\n        chain = BIO_next(chain);\n    }\n}', 'void X509_ALGOR_get0(const ASN1_OBJECT **paobj, int *pptype,\n                     const void **ppval, const X509_ALGOR *algor)\n{\n    if (paobj)\n        *paobj = algor->algorithm;\n    if (pptype) {\n        if (algor->parameter == NULL) {\n            *pptype = V_ASN1_UNDEF;\n            return;\n        } else\n            *pptype = algor->parameter->type;\n        if (ppval)\n            *ppval = algor->parameter->value.ptr;\n    }\n}', 'int OBJ_obj2nid(const ASN1_OBJECT *a)\n{\n    const unsigned int *op;\n    ADDED_OBJ ad, *adp;\n    if (a == NULL)\n        return NID_undef;\n    if (a->nid != 0)\n        return a->nid;\n    if (a->length == 0)\n        return NID_undef;\n    if (added != NULL) {\n        ad.type = ADDED_DATA;\n        ad.obj = (ASN1_OBJECT *)a;\n        adp = lh_ADDED_OBJ_retrieve(added, &ad);\n        if (adp != NULL)\n            return adp->obj->nid;\n    }\n    op = OBJ_bsearch_obj(&a, obj_objs, NUM_OBJ);\n    if (op == NULL)\n        return NID_undef;\n    return nid_objs[*op].nid;\n}', 'DEFINE_LHASH_OF(ADDED_OBJ)', 'void *OPENSSL_LH_retrieve(OPENSSL_LHASH *lh, const void *data)\n{\n    unsigned long hash;\n    OPENSSL_LH_NODE **rn;\n    void *ret;\n    int scratch;\n    lh->error = 0;\n    rn = getrn(lh, data, &hash);\n    if (*rn == NULL) {\n        CRYPTO_atomic_add(&lh->num_retrieve_miss, 1, &scratch, lh->retrieve_stats_lock);\n        return NULL;\n    } else {\n        ret = (*rn)->data;\n        CRYPTO_atomic_add(&lh->num_retrieve, 1, &scratch, lh->retrieve_stats_lock);\n    }\n    return ret;\n}', 'int CRYPTO_atomic_add(int *val, int amount, int *ret, CRYPTO_RWLOCK *lock)\n{\n# if defined(__GNUC__) && defined(__ATOMIC_ACQ_REL)\n    if (__atomic_is_lock_free(sizeof(*val), val)) {\n        *ret = __atomic_add_fetch(val, amount, __ATOMIC_ACQ_REL);\n        return 1;\n    }\n# endif\n    if (!CRYPTO_THREAD_write_lock(lock))\n        return 0;\n    *val += amount;\n    *ret  = *val;\n    if (!CRYPTO_THREAD_unlock(lock))\n        return 0;\n    return 1;\n}', 'int CRYPTO_THREAD_write_lock(CRYPTO_RWLOCK *lock)\n{\n# ifdef USE_RWLOCK\n    if (pthread_rwlock_wrlock(lock) != 0)\n        return 0;\n# else\n    if (pthread_mutex_lock(lock) != 0)\n        return 0;\n# endif\n    return 1;\n}', 'void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx)\n{\n    if (ctx == NULL)\n        return;\n    if (ctx->pmeth && ctx->pmeth->cleanup)\n        ctx->pmeth->cleanup(ctx);\n    EVP_PKEY_free(ctx->pkey);\n    EVP_PKEY_free(ctx->peerkey);\n#ifndef OPENSSL_NO_ENGINE\n    ENGINE_finish(ctx->engine);\n#endif\n    OPENSSL_free(ctx);\n}', 'void EVP_MD_CTX_free(EVP_MD_CTX *ctx)\n{\n    EVP_MD_CTX_reset(ctx);\n    OPENSSL_free(ctx);\n}', 'void CRYPTO_free(void *str, const char *file, int line)\n{\n    if (free_impl != NULL && free_impl != &CRYPTO_free) {\n        free_impl(str, file, line);\n        return;\n    }\n#ifndef OPENSSL_NO_CRYPTO_MDEBUG\n    if (call_malloc_debug) {\n        CRYPTO_mem_debug_free(str, 0, file, line);\n        free(str);\n        CRYPTO_mem_debug_free(str, 1, file, line);\n    } else {\n        free(str);\n    }\n#else\n    free(str);\n#endif\n}']