crypto/x509/x509_lu.c:546: error: NULL_DEREFERENCE
  pointer `obj` last assigned on line 545 could be null and is dereferenced at line 546, column 13.
Showing all 47 steps of the trace


crypto/x509/x509_lu.c:518:1: start of procedure X509_STORE_get1_crls()
516.   }
517.   
518. > STACK_OF(X509_CRL) *X509_STORE_get1_crls(X509_STORE_CTX *ctx, X509_NAME *nm)
519.   {
520.       int i, idx, cnt;

crypto/x509/x509_lu.c:524:5: 
522.       X509_CRL *x;
523.       X509_OBJECT *obj, xobj;
524. >     sk = sk_X509_CRL_new_null();
525.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
526.   

crypto/stack/stack.c:145:1: start of procedure sk_new_null()
  143.   }
  144.   
  145. > _STACK *sk_new_null(void)
  146.   {
  147.       return sk_new((int (*)(const void *, const void *))0);

crypto/stack/stack.c:147:5: Skipping sk_new(): empty list of specs
  145.   _STACK *sk_new_null(void)
  146.   {
  147.       return sk_new((int (*)(const void *, const void *))0);
             ^
  148.   }
  149.   

crypto/stack/stack.c:148:1: return from a call to sk_new_null
  146.   {
  147.       return sk_new((int (*)(const void *, const void *))0);
  148. > }
  149.   
  150.   _STACK *sk_new(int (*c) (const void *, const void *))

crypto/x509/x509_lu.c:525:5: 
523.       X509_OBJECT *obj, xobj;
524.       sk = sk_X509_CRL_new_null();
525. >     CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
526.   
527.       /*

crypto/lock.c:416:1: start of procedure CRYPTO_lock()
  414.   }
  415.   
  416. > void CRYPTO_lock(int mode, int type, const char *file, int line)
  417.   {
  418.   #ifdef LOCK_DEBUG

crypto/lock.c:443:9: Taking false branch
  441.       }
  442.   #endif
  443.       if (type < 0) {
                 ^
  444.           if (dynlock_lock_callback != NULL) {
  445.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:454:16: Taking true branch
  452.               CRYPTO_destroy_dynlockid(type);
  453.           }
  454.       } else if (locking_callback != NULL)
                        ^
  455.           locking_callback(mode, type, file, line);
  456.   }

crypto/lock.c:455:9: Skipping __function_pointer__(): unresolved function pointer
  453.           }
  454.       } else if (locking_callback != NULL)
  455.           locking_callback(mode, type, file, line);
                 ^
  456.   }
  457.   

crypto/lock.c:443:5: 
  441.       }
  442.   #endif
  443. >     if (type < 0) {
  444.           if (dynlock_lock_callback != NULL) {
  445.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:456:1: return from a call to CRYPTO_lock
  454.       } else if (locking_callback != NULL)
  455.           locking_callback(mode, type, file, line);
  456. > }
  457.   
  458.   int CRYPTO_add_lock(int *pointer, int amount, int type, const char *file,

crypto/x509/x509_lu.c:530:5: 
528.        * Always do lookup to possibly add new CRLs to cache
529.        */
530. >     CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
531.       if (!X509_STORE_get_by_subject(ctx, X509_LU_CRL, nm, &xobj)) {
532.           sk_X509_CRL_free(sk);

crypto/lock.c:416:1: start of procedure CRYPTO_lock()
  414.   }
  415.   
  416. > void CRYPTO_lock(int mode, int type, const char *file, int line)
  417.   {
  418.   #ifdef LOCK_DEBUG

crypto/lock.c:443:9: Taking false branch
  441.       }
  442.   #endif
  443.       if (type < 0) {
                 ^
  444.           if (dynlock_lock_callback != NULL) {
  445.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:454:16: Taking true branch
  452.               CRYPTO_destroy_dynlockid(type);
  453.           }
  454.       } else if (locking_callback != NULL)
                        ^
  455.           locking_callback(mode, type, file, line);
  456.   }

crypto/lock.c:455:9: Skipping __function_pointer__(): unresolved function pointer
  453.           }
  454.       } else if (locking_callback != NULL)
  455.           locking_callback(mode, type, file, line);
                 ^
  456.   }
  457.   

crypto/lock.c:443:5: 
  441.       }
  442.   #endif
  443. >     if (type < 0) {
  444.           if (dynlock_lock_callback != NULL) {
  445.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:456:1: return from a call to CRYPTO_lock
  454.       } else if (locking_callback != NULL)
  455.           locking_callback(mode, type, file, line);
  456. > }
  457.   
  458.   int CRYPTO_add_lock(int *pointer, int amount, int type, const char *file,

crypto/x509/x509_lu.c:531:10: Taking false branch
529.        */
530.       CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
531.       if (!X509_STORE_get_by_subject(ctx, X509_LU_CRL, nm, &xobj)) {
                ^
532.           sk_X509_CRL_free(sk);
533.           return NULL;

crypto/x509/x509_lu.c:535:5: 
533.           return NULL;
534.       }
535. >     X509_OBJECT_free_contents(&xobj);
536.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
537.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);

crypto/x509/x509_lu.c:402:1: start of procedure X509_OBJECT_free_contents()
  400.   }
  401.   
  402. > void X509_OBJECT_free_contents(X509_OBJECT *a)
  403.   {
  404.       if (!a)

crypto/x509/x509_lu.c:404:10: Taking false branch
  402.   void X509_OBJECT_free_contents(X509_OBJECT *a)
  403.   {
  404.       if (!a)
                  ^
  405.           return;
  406.       switch (a->type) {

crypto/x509/x509_lu.c:406:5: 
  404.       if (!a)
  405.           return;
  406. >     switch (a->type) {
  407.       default:
  408.           break;

crypto/x509/x509_lu.c:409:5: Switch condition is false. Skipping switch case
  407.       default:
  408.           break;
  409.       case X509_LU_X509:
             ^
  410.           X509_free(a->data.x509);
  411.           break;

crypto/x509/x509_lu.c:412:5: Switch condition is false. Skipping switch case
  410.           X509_free(a->data.x509);
  411.           break;
  412.       case X509_LU_CRL:
             ^
  413.           X509_CRL_free(a->data.crl);
  414.           break;

crypto/x509/x509_lu.c:416:1: return from a call to X509_OBJECT_free_contents
  414.           break;
  415.       }
  416. > }
  417.   
  418.   static int x509_object_idx_cnt(STACK_OF(X509_OBJECT) *h, int type,

crypto/x509/x509_lu.c:536:5: 
534.       }
535.       X509_OBJECT_free_contents(&xobj);
536. >     CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
537.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);
538.       if (idx < 0) {

crypto/lock.c:416:1: start of procedure CRYPTO_lock()
  414.   }
  415.   
  416. > void CRYPTO_lock(int mode, int type, const char *file, int line)
  417.   {
  418.   #ifdef LOCK_DEBUG

crypto/lock.c:443:9: Taking false branch
  441.       }
  442.   #endif
  443.       if (type < 0) {
                 ^
  444.           if (dynlock_lock_callback != NULL) {
  445.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:454:16: Taking true branch
  452.               CRYPTO_destroy_dynlockid(type);
  453.           }
  454.       } else if (locking_callback != NULL)
                        ^
  455.           locking_callback(mode, type, file, line);
  456.   }

crypto/lock.c:455:9: Skipping __function_pointer__(): unresolved function pointer
  453.           }
  454.       } else if (locking_callback != NULL)
  455.           locking_callback(mode, type, file, line);
                 ^
  456.   }
  457.   

crypto/lock.c:443:5: 
  441.       }
  442.   #endif
  443. >     if (type < 0) {
  444.           if (dynlock_lock_callback != NULL) {
  445.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:456:1: return from a call to CRYPTO_lock
  454.       } else if (locking_callback != NULL)
  455.           locking_callback(mode, type, file, line);
  456. > }
  457.   
  458.   int CRYPTO_add_lock(int *pointer, int amount, int type, const char *file,

crypto/x509/x509_lu.c:537:5: Skipping x509_object_idx_cnt(): empty list of specs
535.       X509_OBJECT_free_contents(&xobj);
536.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
537.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);
           ^
538.       if (idx < 0) {
539.           CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);

crypto/x509/x509_lu.c:538:9: Taking false branch
536.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
537.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);
538.       if (idx < 0) {
               ^
539.           CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
540.           sk_X509_CRL_free(sk);

crypto/x509/x509_lu.c:544:10: 
542.       }
543.   
544. >     for (i = 0; i < cnt; i++, idx++) {
545.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
546.           x = obj->data.crl;

crypto/x509/x509_lu.c:544:17: Loop condition is true. Entering loop body
542.       }
543.   
544.       for (i = 0; i < cnt; i++, idx++) {
                       ^
545.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
546.           x = obj->data.crl;

crypto/x509/x509_lu.c:545:15: Condition is true
543.   
544.       for (i = 0; i < cnt; i++, idx++) {
545.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
                     ^
546.           x = obj->data.crl;
547.           X509_CRL_up_ref(x);

crypto/x509/x509_lu.c:545:9: 
543.   
544.       for (i = 0; i < cnt; i++, idx++) {
545. >         obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
546.           x = obj->data.crl;
547.           X509_CRL_up_ref(x);

crypto/stack/stack.c:324:1: start of procedure sk_value()
  322.   }
  323.   
  324. > void *sk_value(const _STACK *st, int i)
  325.   {
  326.       if (!st || (i < 0) || (i >= st->num))

crypto/stack/stack.c:326:10: Taking false branch
  324.   void *sk_value(const _STACK *st, int i)
  325.   {
  326.       if (!st || (i < 0) || (i >= st->num))
                  ^
  327.           return NULL;
  328.       return st->data[i];

crypto/stack/stack.c:326:17: Taking false branch
  324.   void *sk_value(const _STACK *st, int i)
  325.   {
  326.       if (!st || (i < 0) || (i >= st->num))
                         ^
  327.           return NULL;
  328.       return st->data[i];

crypto/stack/stack.c:326:28: Taking true branch
  324.   void *sk_value(const _STACK *st, int i)
  325.   {
  326.       if (!st || (i < 0) || (i >= st->num))
                                    ^
  327.           return NULL;
  328.       return st->data[i];

crypto/stack/stack.c:327:9: 
  325.   {
  326.       if (!st || (i < 0) || (i >= st->num))
  327. >         return NULL;
  328.       return st->data[i];
  329.   }

crypto/stack/stack.c:329:1: return from a call to sk_value
  327.           return NULL;
  328.       return st->data[i];
  329. > }
  330.   
  331.   void *sk_set(_STACK *st, int i, void *value)

crypto/x509/x509_lu.c:546:9: 
544.       for (i = 0; i < cnt; i++, idx++) {
545.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
546. >         x = obj->data.crl;
547.           X509_CRL_up_ref(x);
548.           if (!sk_X509_CRL_push(sk, x)) {

STACK_OF(X509_CRL) *X509_STORE_get1_crls(X509_STORE_CTX *ctx, X509_NAME *nm)
{
    int i, idx, cnt;
    STACK_OF(X509_CRL) *sk;
    X509_CRL *x;
    X509_OBJECT *obj, xobj;
    sk = sk_X509_CRL_new_null();
    CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
    CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
    if (!X509_STORE_get_by_subject(ctx, X509_LU_CRL, nm, &xobj)) {
        sk_X509_CRL_free(sk);
        return NULL;
    }
    X509_OBJECT_free_contents(&xobj);
    CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
    idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);
    if (idx < 0) {
        CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
        sk_X509_CRL_free(sk);
        return NULL;
    }
    for (i = 0; i < cnt; i++, idx++) {
        obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
        x = obj->data.crl;
        X509_CRL_up_ref(x);
        if (!sk_X509_CRL_push(sk, x)) {
            CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
            X509_CRL_free(x);
            sk_X509_CRL_pop_free(sk, X509_CRL_free);
            return NULL;
        }
    }
    CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
    return sk;
}
['STACK_OF(X509_CRL) *X509_STORE_get1_crls(X509_STORE_CTX *ctx, X509_NAME *nm)\n{\n    int i, idx, cnt;\n    STACK_OF(X509_CRL) *sk;\n    X509_CRL *x;\n    X509_OBJECT *obj, xobj;\n    sk = sk_X509_CRL_new_null();\n    CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);\n    CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n    if (!X509_STORE_get_by_subject(ctx, X509_LU_CRL, nm, &xobj)) {\n        sk_X509_CRL_free(sk);\n        return NULL;\n    }\n    X509_OBJECT_free_contents(&xobj);\n    CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);\n    idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_CRL, nm, &cnt);\n    if (idx < 0) {\n        CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n        sk_X509_CRL_free(sk);\n        return NULL;\n    }\n    for (i = 0; i < cnt; i++, idx++) {\n        obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);\n        x = obj->data.crl;\n        X509_CRL_up_ref(x);\n        if (!sk_X509_CRL_push(sk, x)) {\n            CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n            X509_CRL_free(x);\n            sk_X509_CRL_pop_free(sk, X509_CRL_free);\n            return NULL;\n        }\n    }\n    CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n    return sk;\n}', '_STACK *sk_new_null(void)\n{\n    return sk_new((int (*)(const void *, const void *))0);\n}', 'void CRYPTO_lock(int mode, int type, const char *file, int line)\n{\n#ifdef LOCK_DEBUG\n    {\n        CRYPTO_THREADID id;\n        char *rw_text, *operation_text;\n        if (mode & CRYPTO_LOCK)\n            operation_text = "lock  ";\n        else if (mode & CRYPTO_UNLOCK)\n            operation_text = "unlock";\n        else\n            operation_text = "ERROR ";\n        if (mode & CRYPTO_READ)\n            rw_text = "r";\n        else if (mode & CRYPTO_WRITE)\n            rw_text = "w";\n        else\n            rw_text = "ERROR";\n        CRYPTO_THREADID_current(&id);\n        fprintf(stderr, "lock:%08lx:(%s)%s %-18s %s:%d\\n",\n                CRYPTO_THREADID_hash(&id), rw_text, operation_text,\n                CRYPTO_get_lock_name(type), file, line);\n    }\n#endif\n    if (type < 0) {\n        if (dynlock_lock_callback != NULL) {\n            struct CRYPTO_dynlock_value *pointer\n                = CRYPTO_get_dynlock_value(type);\n            OPENSSL_assert(pointer != NULL);\n            dynlock_lock_callback(mode, pointer, file, line);\n            CRYPTO_destroy_dynlockid(type);\n        }\n    } else if (locking_callback != NULL)\n        locking_callback(mode, type, file, line);\n}', 'void X509_OBJECT_free_contents(X509_OBJECT *a)\n{\n    if (!a)\n        return;\n    switch (a->type) {\n    default:\n        break;\n    case X509_LU_X509:\n        X509_free(a->data.x509);\n        break;\n    case X509_LU_CRL:\n        X509_CRL_free(a->data.crl);\n        break;\n    }\n}', 'void *sk_value(const _STACK *st, int i)\n{\n    if (!st || (i < 0) || (i >= st->num))\n        return NULL;\n    return st->data[i];\n}']