crypto/x509/x509_lu.c:523: error: NULL_DEREFERENCE
  pointer `obj` last assigned on line 522 could be null and is dereferenced at line 523, column 13.
Showing all 25 steps of the trace


crypto/x509/x509_lu.c:492:1: start of procedure X509_STORE_get1_certs()
490.   }
491.   
492. > STACK_OF(X509) *X509_STORE_get1_certs(X509_STORE_CTX *ctx, X509_NAME *nm)
493.   {
494.       int i, idx, cnt;

crypto/x509/x509_lu.c:498:5: 
496.       X509 *x;
497.       X509_OBJECT *obj;
498. >     sk = sk_X509_new_null();
499.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
500.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);

crypto/stack/stack.c:145:1: start of procedure sk_new_null()
  143.   }
  144.   
  145. > _STACK *sk_new_null(void)
  146.   {
  147.       return sk_new((int (*)(const void *, const void *))0);

crypto/stack/stack.c:147:5: Skipping sk_new(): empty list of specs
  145.   _STACK *sk_new_null(void)
  146.   {
  147.       return sk_new((int (*)(const void *, const void *))0);
             ^
  148.   }
  149.   

crypto/stack/stack.c:148:1: return from a call to sk_new_null
  146.   {
  147.       return sk_new((int (*)(const void *, const void *))0);
  148. > }
  149.   
  150.   _STACK *sk_new(int (*c) (const void *, const void *))

crypto/x509/x509_lu.c:499:5: 
497.       X509_OBJECT *obj;
498.       sk = sk_X509_new_null();
499. >     CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
500.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
501.       if (idx < 0) {

crypto/lock.c:417:1: start of procedure CRYPTO_lock()
  415.   }
  416.   
  417. > void CRYPTO_lock(int mode, int type, const char *file, int line)
  418.   {
  419.   #ifdef LOCK_DEBUG

crypto/lock.c:444:9: Taking false branch
  442.       }
  443.   #endif
  444.       if (type < 0) {
                 ^
  445.           if (dynlock_lock_callback != NULL) {
  446.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:455:16: Taking true branch
  453.               CRYPTO_destroy_dynlockid(type);
  454.           }
  455.       } else if (locking_callback != NULL)
                        ^
  456.           locking_callback(mode, type, file, line);
  457.   }

crypto/lock.c:456:9: Skipping __function_pointer__(): unresolved function pointer
  454.           }
  455.       } else if (locking_callback != NULL)
  456.           locking_callback(mode, type, file, line);
                 ^
  457.   }
  458.   

crypto/lock.c:444:5: 
  442.       }
  443.   #endif
  444. >     if (type < 0) {
  445.           if (dynlock_lock_callback != NULL) {
  446.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:457:1: return from a call to CRYPTO_lock
  455.       } else if (locking_callback != NULL)
  456.           locking_callback(mode, type, file, line);
  457. > }
  458.   
  459.   int CRYPTO_add_lock(int *pointer, int amount, int type, const char *file,

crypto/x509/x509_lu.c:500:5: Skipping x509_object_idx_cnt(): empty list of specs
498.       sk = sk_X509_new_null();
499.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
500.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
           ^
501.       if (idx < 0) {
502.           /*

crypto/x509/x509_lu.c:501:9: Taking false branch
499.       CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
500.       idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
501.       if (idx < 0) {
               ^
502.           /*
503.            * Nothing found in cache: do lookup to possibly add new objects to

crypto/x509/x509_lu.c:521:10: 
519.           }
520.       }
521. >     for (i = 0; i < cnt; i++, idx++) {
522.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
523.           x = obj->data.x509;

crypto/x509/x509_lu.c:521:17: Loop condition is true. Entering loop body
519.           }
520.       }
521.       for (i = 0; i < cnt; i++, idx++) {
                       ^
522.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
523.           x = obj->data.x509;

crypto/x509/x509_lu.c:522:15: Condition is true
520.       }
521.       for (i = 0; i < cnt; i++, idx++) {
522.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
                     ^
523.           x = obj->data.x509;
524.           CRYPTO_add(&x->references, 1, CRYPTO_LOCK_X509);

crypto/x509/x509_lu.c:522:9: 
520.       }
521.       for (i = 0; i < cnt; i++, idx++) {
522. >         obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
523.           x = obj->data.x509;
524.           CRYPTO_add(&x->references, 1, CRYPTO_LOCK_X509);

crypto/stack/stack.c:328:1: start of procedure sk_value()
  326.   }
  327.   
  328. > void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))

crypto/stack/stack.c:330:10: Taking false branch
  328.   void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
                  ^
  331.           return NULL;
  332.       return st->data[i];

crypto/stack/stack.c:330:17: Taking false branch
  328.   void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
                         ^
  331.           return NULL;
  332.       return st->data[i];

crypto/stack/stack.c:330:28: Taking true branch
  328.   void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
                                    ^
  331.           return NULL;
  332.       return st->data[i];

crypto/stack/stack.c:331:9: 
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
  331. >         return NULL;
  332.       return st->data[i];
  333.   }

crypto/stack/stack.c:333:1: return from a call to sk_value
  331.           return NULL;
  332.       return st->data[i];
  333. > }
  334.   
  335.   void *sk_set(_STACK *st, int i, void *value)

crypto/x509/x509_lu.c:523:9: 
521.       for (i = 0; i < cnt; i++, idx++) {
522.           obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
523. >         x = obj->data.x509;
524.           CRYPTO_add(&x->references, 1, CRYPTO_LOCK_X509);
525.           if (!sk_X509_push(sk, x)) {

STACK_OF(X509) *X509_STORE_get1_certs(X509_STORE_CTX *ctx, X509_NAME *nm)
{
    int i, idx, cnt;
    STACK_OF(X509) *sk;
    X509 *x;
    X509_OBJECT *obj;
    sk = sk_X509_new_null();
    CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
    idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
    if (idx < 0) {
        X509_OBJECT xobj;
        CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
        if (!X509_STORE_get_by_subject(ctx, X509_LU_X509, nm, &xobj)) {
            sk_X509_free(sk);
            return NULL;
        }
        X509_OBJECT_free_contents(&xobj);
        CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);
        idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);
        if (idx < 0) {
            CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
            sk_X509_free(sk);
            return NULL;
        }
    }
    for (i = 0; i < cnt; i++, idx++) {
        obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);
        x = obj->data.x509;
        CRYPTO_add(&x->references, 1, CRYPTO_LOCK_X509);
        if (!sk_X509_push(sk, x)) {
            CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
            X509_free(x);
            sk_X509_pop_free(sk, X509_free);
            return NULL;
        }
    }
    CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);
    return sk;
}
['STACK_OF(X509) *X509_STORE_get1_certs(X509_STORE_CTX *ctx, X509_NAME *nm)\n{\n    int i, idx, cnt;\n    STACK_OF(X509) *sk;\n    X509 *x;\n    X509_OBJECT *obj;\n    sk = sk_X509_new_null();\n    CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);\n    idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);\n    if (idx < 0) {\n        X509_OBJECT xobj;\n        CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n        if (!X509_STORE_get_by_subject(ctx, X509_LU_X509, nm, &xobj)) {\n            sk_X509_free(sk);\n            return NULL;\n        }\n        X509_OBJECT_free_contents(&xobj);\n        CRYPTO_w_lock(CRYPTO_LOCK_X509_STORE);\n        idx = x509_object_idx_cnt(ctx->ctx->objs, X509_LU_X509, nm, &cnt);\n        if (idx < 0) {\n            CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n            sk_X509_free(sk);\n            return NULL;\n        }\n    }\n    for (i = 0; i < cnt; i++, idx++) {\n        obj = sk_X509_OBJECT_value(ctx->ctx->objs, idx);\n        x = obj->data.x509;\n        CRYPTO_add(&x->references, 1, CRYPTO_LOCK_X509);\n        if (!sk_X509_push(sk, x)) {\n            CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n            X509_free(x);\n            sk_X509_pop_free(sk, X509_free);\n            return NULL;\n        }\n    }\n    CRYPTO_w_unlock(CRYPTO_LOCK_X509_STORE);\n    return sk;\n}', '_STACK *sk_new_null(void)\n{\n    return sk_new((int (*)(const void *, const void *))0);\n}', 'void CRYPTO_lock(int mode, int type, const char *file, int line)\n{\n#ifdef LOCK_DEBUG\n    {\n        CRYPTO_THREADID id;\n        char *rw_text, *operation_text;\n        if (mode & CRYPTO_LOCK)\n            operation_text = "lock  ";\n        else if (mode & CRYPTO_UNLOCK)\n            operation_text = "unlock";\n        else\n            operation_text = "ERROR ";\n        if (mode & CRYPTO_READ)\n            rw_text = "r";\n        else if (mode & CRYPTO_WRITE)\n            rw_text = "w";\n        else\n            rw_text = "ERROR";\n        CRYPTO_THREADID_current(&id);\n        fprintf(stderr, "lock:%08lx:(%s)%s %-18s %s:%d\\n",\n                CRYPTO_THREADID_hash(&id), rw_text, operation_text,\n                CRYPTO_get_lock_name(type), file, line);\n    }\n#endif\n    if (type < 0) {\n        if (dynlock_lock_callback != NULL) {\n            struct CRYPTO_dynlock_value *pointer\n                = CRYPTO_get_dynlock_value(type);\n            OPENSSL_assert(pointer != NULL);\n            dynlock_lock_callback(mode, pointer, file, line);\n            CRYPTO_destroy_dynlockid(type);\n        }\n    } else if (locking_callback != NULL)\n        locking_callback(mode, type, file, line);\n}', 'void *sk_value(const _STACK *st, int i)\n{\n    if (!st || (i < 0) || (i >= st->num))\n        return NULL;\n    return st->data[i];\n}']