apps/s_server.c:2935: error: NULL_DEREFERENCE
  pointer `sess` last assigned on line 2933 could be null and is dereferenced at line 2935, column 2.
Showing all 19 steps of the trace


apps/s_server.c:2928:1: start of procedure add_session()
2926.   static simple_ssl_session *first = NULL;
2927.   
2928. > static int add_session(SSL *ssl, SSL_SESSION *session)
2929.   	{
2930.   	simple_ssl_session *sess;

apps/s_server.c:2933:2: 
2931.   	unsigned char *p;
2932.   
2933. > 	sess = OPENSSL_malloc(sizeof(simple_ssl_session));
2934.   
2935.   	sess->idlen = SSL_SESSION_get_id_len(session);

crypto/mem.c:297:1: start of procedure CRYPTO_malloc()
  295.   	}
  296.   
  297. > void *CRYPTO_malloc(int num, const char *file, int line)
  298.   	{
  299.   	void *ret = NULL;

crypto/mem.c:299:2: 
  297.   void *CRYPTO_malloc(int num, const char *file, int line)
  298.   	{
  299. > 	void *ret = NULL;
  300.   
  301.   	if (num <= 0) return NULL;

crypto/mem.c:301:6: Taking false branch
  299.   	void *ret = NULL;
  300.   
  301.   	if (num <= 0) return NULL;
              ^
  302.   
  303.   	allow_customize = 0;

crypto/mem.c:303:2: 
  301.   	if (num <= 0) return NULL;
  302.   
  303. > 	allow_customize = 0;
  304.   	if (malloc_debug_func != NULL)
  305.   		{

crypto/mem.c:304:6: Taking true branch
  302.   
  303.   	allow_customize = 0;
  304.   	if (malloc_debug_func != NULL)
              ^
  305.   		{
  306.   		allow_customize_debug = 0;

crypto/mem.c:306:3: 
  304.   	if (malloc_debug_func != NULL)
  305.   		{
  306. > 		allow_customize_debug = 0;
  307.   		malloc_debug_func(NULL, num, file, line, 0);
  308.   		}

crypto/mem.c:307:3: Skipping __function_pointer__(): unresolved function pointer
  305.   		{
  306.   		allow_customize_debug = 0;
  307.   		malloc_debug_func(NULL, num, file, line, 0);
           ^
  308.   		}
  309.   	ret = malloc_ex_func(num,file,line);

crypto/mem.c:309:2: Skipping __function_pointer__(): unresolved function pointer
  307.   		malloc_debug_func(NULL, num, file, line, 0);
  308.   		}
  309.   	ret = malloc_ex_func(num,file,line);
          ^
  310.   #ifdef LEVITTE_DEBUG_MEM
  311.   	fprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\n", ret, num);

crypto/mem.c:313:6: Taking true branch
  311.   	fprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\n", ret, num);
  312.   #endif
  313.   	if (malloc_debug_func != NULL)
              ^
  314.   		malloc_debug_func(ret, num, file, line, 1);
  315.   

crypto/mem.c:314:3: Skipping __function_pointer__(): unresolved function pointer
  312.   #endif
  313.   	if (malloc_debug_func != NULL)
  314.   		malloc_debug_func(ret, num, file, line, 1);
           ^
  315.   
  316.   #ifndef OPENSSL_CPUID_OBJ

crypto/mem.c:320:12: Taking false branch
  318.            * sanitisation function can't be optimised out. NB: We only do
  319.            * this for >2Kb so the overhead doesn't bother us. */
  320.           if(ret && (num > 2048))
                    ^
  321.   	{	extern unsigned char cleanse_ctr;
  322.                   ((unsigned char *)ret)[0] = cleanse_ctr;

crypto/mem.c:326:2: 
  324.   #endif
  325.   
  326. > 	return ret;
  327.   	}
  328.   char *CRYPTO_strdup(const char *str, const char *file, int line)

crypto/mem.c:327:2: return from a call to CRYPTO_malloc
  325.   
  326.   	return ret;
  327.   	}
          ^
  328.   char *CRYPTO_strdup(const char *str, const char *file, int line)
  329.   	{

apps/s_server.c:2935:2: 
2933.   	sess = OPENSSL_malloc(sizeof(simple_ssl_session));
2934.   
2935. > 	sess->idlen = SSL_SESSION_get_id_len(session);
2936.   	sess->derlen = i2d_SSL_SESSION(session, NULL);
2937.   

ssl/ssl_sess.c:844:1: start of procedure SSL_SESSION_get_id_len()
  842.   	}
  843.   
  844. > unsigned int SSL_SESSION_get_id_len(SSL_SESSION *s)
  845.   	{
  846.   	return s->session_id_length;

ssl/ssl_sess.c:846:2: 
  844.   unsigned int SSL_SESSION_get_id_len(SSL_SESSION *s)
  845.   	{
  846. > 	return s->session_id_length;
  847.   	}
  848.   

ssl/ssl_sess.c:847:2: return from a call to SSL_SESSION_get_id_len
  845.   	{
  846.   	return s->session_id_length;
  847.   	}
          ^
  848.   
  849.   const unsigned char *SSL_SESSION_get0_id(SSL_SESSION *s)

static int add_session(SSL *ssl, SSL_SESSION *session)
	{
	simple_ssl_session *sess;
	unsigned char *p;
	sess = OPENSSL_malloc(sizeof(simple_ssl_session));
	sess->idlen = SSL_SESSION_get_id_len(session);
	sess->derlen = i2d_SSL_SESSION(session, NULL);
	sess->id = BUF_memdup(SSL_SESSION_get0_id(session), sess->idlen);
	sess->der = OPENSSL_malloc(sess->derlen);
	p = sess->der;
	i2d_SSL_SESSION(session, &p);
	sess->next = first;
	first = sess;
	BIO_printf(bio_err, "New session added to external cache\n");
	return 0;
	}
['static int add_session(SSL *ssl, SSL_SESSION *session)\n\t{\n\tsimple_ssl_session *sess;\n\tunsigned char *p;\n\tsess = OPENSSL_malloc(sizeof(simple_ssl_session));\n\tsess->idlen = SSL_SESSION_get_id_len(session);\n\tsess->derlen = i2d_SSL_SESSION(session, NULL);\n\tsess->id = BUF_memdup(SSL_SESSION_get0_id(session), sess->idlen);\n\tsess->der = OPENSSL_malloc(sess->derlen);\n\tp = sess->der;\n\ti2d_SSL_SESSION(session, &p);\n\tsess->next = first;\n\tfirst = sess;\n\tBIO_printf(bio_err, "New session added to external cache\\n");\n\treturn 0;\n\t}', 'void *CRYPTO_malloc(int num, const char *file, int line)\n\t{\n\tvoid *ret = NULL;\n\tif (num <= 0) return NULL;\n\tallow_customize = 0;\n\tif (malloc_debug_func != NULL)\n\t\t{\n\t\tallow_customize_debug = 0;\n\t\tmalloc_debug_func(NULL, num, file, line, 0);\n\t\t}\n\tret = malloc_ex_func(num,file,line);\n#ifdef LEVITTE_DEBUG_MEM\n\tfprintf(stderr, "LEVITTE_DEBUG_MEM:         > 0x%p (%d)\\n", ret, num);\n#endif\n\tif (malloc_debug_func != NULL)\n\t\tmalloc_debug_func(ret, num, file, line, 1);\n#ifndef OPENSSL_CPUID_OBJ\n        if(ret && (num > 2048))\n\t{\textern unsigned char cleanse_ctr;\n                ((unsigned char *)ret)[0] = cleanse_ctr;\n\t}\n#endif\n\treturn ret;\n\t}', 'unsigned int SSL_SESSION_get_id_len(SSL_SESSION *s)\n\t{\n\treturn s->session_id_length;\n\t}']