crypto/asn1/a_int.c:372: error: NULL_DEREFERENCE
  pointer `null` is dereferenced by call to `ASN1_STRING_set()` at line 372, column 9.
Showing all 60 steps of the trace


crypto/asn1/a_int.c:352:1: start of procedure c2i_ASN1_INTEGER()
350.   
351.   /* Convert ASN1 INTEGER content octets to ASN1_INTEGER structure */
352. > ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a, const unsigned char **pp,
353.                                  long len)
354.   {

crypto/asn1/a_int.c:355:5: 
353.                                  long len)
354.   {
355. >     ASN1_INTEGER *ret = NULL;
356.       size_t r;
357.       int neg;

crypto/asn1/a_int.c:359:5: Skipping c2i_ibuf(): empty list of specs
357.       int neg;
358.   
359.       r = c2i_ibuf(NULL, NULL, *pp, len);
           ^
360.   
361.       if (r == 0)

crypto/asn1/a_int.c:361:9: Taking false branch
359.       r = c2i_ibuf(NULL, NULL, *pp, len);
360.   
361.       if (r == 0)
               ^
362.           return NULL;
363.   

crypto/asn1/a_int.c:364:10: Taking false branch
362.           return NULL;
363.   
364.       if ((a == NULL) || ((*a) == NULL)) {
                ^
365.           ret = ASN1_INTEGER_new();
366.           if (ret == NULL)

crypto/asn1/a_int.c:364:25: Taking true branch
362.           return NULL;
363.   
364.       if ((a == NULL) || ((*a) == NULL)) {
                               ^
365.           ret = ASN1_INTEGER_new();
366.           if (ret == NULL)

crypto/asn1/a_int.c:365:9: 
363.   
364.       if ((a == NULL) || ((*a) == NULL)) {
365. >         ret = ASN1_INTEGER_new();
366.           if (ret == NULL)
367.               return NULL;

crypto/asn1/tasn_typ.c:77:1: start of procedure ASN1_INTEGER_new()
  75.   
  76.   IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_OCTET_STRING)
  77. > IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_INTEGER)
  78.   IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_ENUMERATED)
  79.   IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_BIT_STRING)

crypto/asn1/asn1_lib.c:348:1: start of procedure ASN1_STRING_type_new()
    346.   }
    347.   
    348. > ASN1_STRING *ASN1_STRING_type_new(int type)
    349.   {
    350.       ASN1_STRING *ret;

crypto/asn1/asn1_lib.c:352:5: 
    350.       ASN1_STRING *ret;
    351.   
    352. >     ret = OPENSSL_zalloc(sizeof(*ret));
    353.       if (ret == NULL) {
    354.           ASN1err(ASN1_F_ASN1_STRING_TYPE_NEW, ERR_R_MALLOC_FAILURE);

crypto/mem.c:156:1: start of procedure CRYPTO_zalloc()
      154.   }
      155.   
      156. > void *CRYPTO_zalloc(size_t num, const char *file, int line)
      157.   {
      158.       void *ret = CRYPTO_malloc(num, file, line);

crypto/mem.c:158:5: 
      156.   void *CRYPTO_zalloc(size_t num, const char *file, int line)
      157.   {
      158. >     void *ret = CRYPTO_malloc(num, file, line);
      159.   
      160.       if (ret != NULL)

crypto/mem.c:119:1: start of procedure CRYPTO_malloc()
        117.   }
        118.   
        119. > void *CRYPTO_malloc(size_t num, const char *file, int line)
        120.   {
        121.       void *ret = NULL;

crypto/mem.c:121:5: 
        119.   void *CRYPTO_malloc(size_t num, const char *file, int line)
        120.   {
        121. >     void *ret = NULL;
        122.   
        123.       if (num <= 0)

crypto/mem.c:123:9: Taking false branch
        121.       void *ret = NULL;
        122.   
        123.       if (num <= 0)
                       ^
        124.           return NULL;
        125.   

crypto/mem.c:126:5: 
        124.           return NULL;
        125.   
        126. >     allow_customize = 0;
        127.   #ifndef OPENSSL_NO_CRYPTO_MDEBUG
        128.       if (call_malloc_debug) {

crypto/mem.c:136:5: 
        134.       }
        135.   #else
        136. >     (void)file;
        137.       (void)line;
        138.       ret = malloc(num);

crypto/mem.c:137:5: 
        135.   #else
        136.       (void)file;
        137. >     (void)line;
        138.       ret = malloc(num);
        139.   #endif

crypto/mem.c:138:5: 
        136.       (void)file;
        137.       (void)line;
        138. >     ret = malloc(num);
        139.   #endif
        140.   

crypto/mem.c:153:5: 
        151.   #endif
        152.   
        153. >     return ret;
        154.   }
        155.   

crypto/mem.c:154:1: return from a call to CRYPTO_malloc
        152.   
        153.       return ret;
        154. > }
        155.   
        156.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

crypto/mem.c:160:9: Taking true branch
      158.       void *ret = CRYPTO_malloc(num, file, line);
      159.   
      160.       if (ret != NULL)
                     ^
      161.           memset(ret, 0, num);
      162.       return ret;

crypto/mem.c:161:9: 
      159.   
      160.       if (ret != NULL)
      161. >         memset(ret, 0, num);
      162.       return ret;
      163.   }

crypto/mem.c:162:5: 
      160.       if (ret != NULL)
      161.           memset(ret, 0, num);
      162. >     return ret;
      163.   }
      164.   

crypto/mem.c:163:1: return from a call to CRYPTO_zalloc
      161.           memset(ret, 0, num);
      162.       return ret;
      163. > }
      164.   
      165.   void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)

crypto/asn1/asn1_lib.c:353:9: Taking false branch
    351.   
    352.       ret = OPENSSL_zalloc(sizeof(*ret));
    353.       if (ret == NULL) {
                   ^
    354.           ASN1err(ASN1_F_ASN1_STRING_TYPE_NEW, ERR_R_MALLOC_FAILURE);
    355.           return (NULL);

crypto/asn1/asn1_lib.c:357:5: 
    355.           return (NULL);
    356.       }
    357. >     ret->type = type;
    358.       return (ret);
    359.   }

crypto/asn1/asn1_lib.c:358:5: 
    356.       }
    357.       ret->type = type;
    358. >     return (ret);
    359.   }
    360.   

crypto/asn1/asn1_lib.c:359:1: return from a call to ASN1_STRING_type_new
    357.       ret->type = type;
    358.       return (ret);
    359. > }
    360.   
    361.   void ASN1_STRING_free(ASN1_STRING *a)

crypto/asn1/tasn_typ.c:77:1: return from a call to ASN1_INTEGER_new
  75.   
  76.   IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_OCTET_STRING)
  77. > IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_INTEGER)
  78.   IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_ENUMERATED)
  79.   IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_BIT_STRING)

crypto/asn1/a_int.c:366:13: Taking false branch
364.       if ((a == NULL) || ((*a) == NULL)) {
365.           ret = ASN1_INTEGER_new();
366.           if (ret == NULL)
                   ^
367.               return NULL;
368.           ret->type = V_ASN1_INTEGER;

crypto/asn1/a_int.c:368:9: 
366.           if (ret == NULL)
367.               return NULL;
368. >         ret->type = V_ASN1_INTEGER;
369.       } else
370.           ret = *a;

crypto/asn1/a_int.c:372:9: 
370.           ret = *a;
371.   
372. >     if (ASN1_STRING_set(ret, NULL, r) == 0)
373.           goto err;
374.   

crypto/asn1/asn1_lib.c:307:1: start of procedure ASN1_STRING_set()
  305.   }
  306.   
  307. > int ASN1_STRING_set(ASN1_STRING *str, const void *_data, int len)
  308.   {
  309.       unsigned char *c;

crypto/asn1/asn1_lib.c:310:5: 
  308.   {
  309.       unsigned char *c;
  310. >     const char *data = _data;
  311.   
  312.       if (len < 0) {

crypto/asn1/asn1_lib.c:312:9: Taking false branch
  310.       const char *data = _data;
  311.   
  312.       if (len < 0) {
                 ^
  313.           if (data == NULL)
  314.               return (0);

crypto/asn1/asn1_lib.c:318:10: Taking false branch
  316.               len = strlen(data);
  317.       }
  318.       if ((str->length < len) || (str->data == NULL)) {
                  ^
  319.           c = str->data;
  320.           str->data = OPENSSL_realloc(c, len + 1);

crypto/asn1/asn1_lib.c:318:33: Taking true branch
  316.               len = strlen(data);
  317.       }
  318.       if ((str->length < len) || (str->data == NULL)) {
                                         ^
  319.           c = str->data;
  320.           str->data = OPENSSL_realloc(c, len + 1);

crypto/asn1/asn1_lib.c:319:9: 
  317.       }
  318.       if ((str->length < len) || (str->data == NULL)) {
  319. >         c = str->data;
  320.           str->data = OPENSSL_realloc(c, len + 1);
  321.           if (str->data == NULL) {

crypto/asn1/asn1_lib.c:320:9: 
  318.       if ((str->length < len) || (str->data == NULL)) {
  319.           c = str->data;
  320. >         str->data = OPENSSL_realloc(c, len + 1);
  321.           if (str->data == NULL) {
  322.               ASN1err(ASN1_F_ASN1_STRING_SET, ERR_R_MALLOC_FAILURE);

crypto/mem.c:165:1: start of procedure CRYPTO_realloc()
    163.   }
    164.   
    165. > void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)
    166.   {
    167.       if (str == NULL)

crypto/mem.c:167:9: Taking true branch
    165.   void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)
    166.   {
    167.       if (str == NULL)
                   ^
    168.           return CRYPTO_malloc(num, file, line);
    169.   

crypto/mem.c:168:9: 
    166.   {
    167.       if (str == NULL)
    168. >         return CRYPTO_malloc(num, file, line);
    169.   
    170.       if (num == 0) {

crypto/mem.c:119:1: start of procedure CRYPTO_malloc()
      117.   }
      118.   
      119. > void *CRYPTO_malloc(size_t num, const char *file, int line)
      120.   {
      121.       void *ret = NULL;

crypto/mem.c:121:5: 
      119.   void *CRYPTO_malloc(size_t num, const char *file, int line)
      120.   {
      121. >     void *ret = NULL;
      122.   
      123.       if (num <= 0)

crypto/mem.c:123:9: Taking false branch
      121.       void *ret = NULL;
      122.   
      123.       if (num <= 0)
                     ^
      124.           return NULL;
      125.   

crypto/mem.c:126:5: 
      124.           return NULL;
      125.   
      126. >     allow_customize = 0;
      127.   #ifndef OPENSSL_NO_CRYPTO_MDEBUG
      128.       if (call_malloc_debug) {

crypto/mem.c:136:5: 
      134.       }
      135.   #else
      136. >     (void)file;
      137.       (void)line;
      138.       ret = malloc(num);

crypto/mem.c:137:5: 
      135.   #else
      136.       (void)file;
      137. >     (void)line;
      138.       ret = malloc(num);
      139.   #endif

crypto/mem.c:138:5: 
      136.       (void)file;
      137.       (void)line;
      138. >     ret = malloc(num);
      139.   #endif
      140.   

crypto/mem.c:153:5: 
      151.   #endif
      152.   
      153. >     return ret;
      154.   }
      155.   

crypto/mem.c:154:1: return from a call to CRYPTO_malloc
      152.   
      153.       return ret;
      154. > }
      155.   
      156.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

crypto/mem.c:190:1: return from a call to CRYPTO_realloc
    188.       return realloc(str, num);
    189.   
    190. > }
    191.   
    192.   void *CRYPTO_clear_realloc(void *str, size_t old_len, size_t num,

crypto/asn1/asn1_lib.c:321:13: Taking false branch
  319.           c = str->data;
  320.           str->data = OPENSSL_realloc(c, len + 1);
  321.           if (str->data == NULL) {
                     ^
  322.               ASN1err(ASN1_F_ASN1_STRING_SET, ERR_R_MALLOC_FAILURE);
  323.               str->data = c;

crypto/asn1/asn1_lib.c:327:5: 
  325.           }
  326.       }
  327. >     str->length = len;
  328.       if (data != NULL) {
  329.           memcpy(str->data, data, len);

crypto/asn1/asn1_lib.c:328:9: Taking true branch
  326.       }
  327.       str->length = len;
  328.       if (data != NULL) {
                 ^
  329.           memcpy(str->data, data, len);
  330.           /* an allowance for strings :-) */

crypto/asn1/asn1_lib.c:329:9: 
  327.       str->length = len;
  328.       if (data != NULL) {
  329. >         memcpy(str->data, data, len);
  330.           /* an allowance for strings :-) */
  331.           str->data[len] = '\0';

crypto/asn1/asn1_lib.c:331:9: 
  329.           memcpy(str->data, data, len);
  330.           /* an allowance for strings :-) */
  331. >         str->data[len] = '\0';
  332.       }
  333.       return (1);

crypto/asn1/asn1_lib.c:333:5: 
  331.           str->data[len] = '\0';
  332.       }
  333. >     return (1);
  334.   }
  335.   

crypto/asn1/asn1_lib.c:334:1: return from a call to ASN1_STRING_set
  332.       }
  333.       return (1);
  334. > }
  335.   
  336.   void ASN1_STRING_set0(ASN1_STRING *str, void *data, int len)

ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a, const unsigned char **pp,
                               long len)
{
    ASN1_INTEGER *ret = NULL;
    size_t r;
    int neg;
    r = c2i_ibuf(NULL, NULL, *pp, len);
    if (r == 0)
        return NULL;
    if ((a == NULL) || ((*a) == NULL)) {
        ret = ASN1_INTEGER_new();
        if (ret == NULL)
            return NULL;
        ret->type = V_ASN1_INTEGER;
    } else
        ret = *a;
    if (ASN1_STRING_set(ret, NULL, r) == 0)
        goto err;
    c2i_ibuf(ret->data, &neg, *pp, len);
    if (neg)
        ret->type |= V_ASN1_NEG;
    *pp += len;
    if (a != NULL)
        (*a) = ret;
    return ret;
 err:
    ASN1err(ASN1_F_C2I_ASN1_INTEGER, ERR_R_MALLOC_FAILURE);
    if ((a == NULL) || (*a != ret))
        ASN1_INTEGER_free(ret);
    return NULL;
}
['ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a, const unsigned char **pp,\n                               long len)\n{\n    ASN1_INTEGER *ret = NULL;\n    size_t r;\n    int neg;\n    r = c2i_ibuf(NULL, NULL, *pp, len);\n    if (r == 0)\n        return NULL;\n    if ((a == NULL) || ((*a) == NULL)) {\n        ret = ASN1_INTEGER_new();\n        if (ret == NULL)\n            return NULL;\n        ret->type = V_ASN1_INTEGER;\n    } else\n        ret = *a;\n    if (ASN1_STRING_set(ret, NULL, r) == 0)\n        goto err;\n    c2i_ibuf(ret->data, &neg, *pp, len);\n    if (neg)\n        ret->type |= V_ASN1_NEG;\n    *pp += len;\n    if (a != NULL)\n        (*a) = ret;\n    return ret;\n err:\n    ASN1err(ASN1_F_C2I_ASN1_INTEGER, ERR_R_MALLOC_FAILURE);\n    if ((a == NULL) || (*a != ret))\n        ASN1_INTEGER_free(ret);\n    return NULL;\n}', 'IMPLEMENT_ASN1_STRING_FUNCTIONS(ASN1_INTEGER)', 'ASN1_STRING *ASN1_STRING_type_new(int type)\n{\n    ASN1_STRING *ret;\n    ret = OPENSSL_zalloc(sizeof(*ret));\n    if (ret == NULL) {\n        ASN1err(ASN1_F_ASN1_STRING_TYPE_NEW, ERR_R_MALLOC_FAILURE);\n        return (NULL);\n    }\n    ret->type = type;\n    return (ret);\n}', 'void *CRYPTO_zalloc(size_t num, const char *file, int line)\n{\n    void *ret = CRYPTO_malloc(num, file, line);\n    if (ret != NULL)\n        memset(ret, 0, num);\n    return ret;\n}', 'void *CRYPTO_malloc(size_t num, const char *file, int line)\n{\n    void *ret = NULL;\n    if (num <= 0)\n        return NULL;\n    allow_customize = 0;\n#ifndef OPENSSL_NO_CRYPTO_MDEBUG\n    if (call_malloc_debug) {\n        CRYPTO_mem_debug_malloc(NULL, num, 0, file, line);\n        ret = malloc(num);\n        CRYPTO_mem_debug_malloc(ret, num, 1, file, line);\n    } else {\n        ret = malloc(num);\n    }\n#else\n    (void)file;\n    (void)line;\n    ret = malloc(num);\n#endif\n#ifndef OPENSSL_CPUID_OBJ\n    if (ret && (num > 2048)) {\n        extern unsigned char cleanse_ctr;\n        ((unsigned char *)ret)[0] = cleanse_ctr;\n    }\n#endif\n    return ret;\n}', "int ASN1_STRING_set(ASN1_STRING *str, const void *_data, int len)\n{\n    unsigned char *c;\n    const char *data = _data;\n    if (len < 0) {\n        if (data == NULL)\n            return (0);\n        else\n            len = strlen(data);\n    }\n    if ((str->length < len) || (str->data == NULL)) {\n        c = str->data;\n        str->data = OPENSSL_realloc(c, len + 1);\n        if (str->data == NULL) {\n            ASN1err(ASN1_F_ASN1_STRING_SET, ERR_R_MALLOC_FAILURE);\n            str->data = c;\n            return (0);\n        }\n    }\n    str->length = len;\n    if (data != NULL) {\n        memcpy(str->data, data, len);\n        str->data[len] = '\\0';\n    }\n    return (1);\n}", 'void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)\n{\n    if (str == NULL)\n        return CRYPTO_malloc(num, file, line);\n    if (num == 0) {\n        CRYPTO_free(str);\n        return NULL;\n    }\n    allow_customize = 0;\n#ifndef OPENSSL_NO_CRYPTO_MDEBUG\n    if (call_malloc_debug) {\n        void *ret;\n        CRYPTO_mem_debug_realloc(str, NULL, num, 0, file, line);\n        ret = realloc(str, num);\n        CRYPTO_mem_debug_realloc(str, ret, num, 1, file, line);\n        return ret;\n    }\n#else\n    (void)file;\n    (void)line;\n#endif\n    return realloc(str, num);\n}']