apps/ocsp.c:914: error: INTEGER_OVERFLOW_L2
  ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free`.
Showing all 17 steps of the trace


apps/ocsp.c:742:10: Call
740.   			BIO *sbio;
741.   #if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3)
742.   			ctx = SSL_CTX_new(SSLv23_client_method());
                ^
743.   #elif !defined(OPENSSL_NO_SSL3)
744.   			ctx = SSL_CTX_new(SSLv3_client_method());

ssl/ssl_lib.c:1353:16: Call
  1351.   	ret->client_cert_cb=0;
  1352.   
  1353.   	ret->sessions=lh_new(LHASH_HASH_FN(SSL_SESSION_hash),
                         ^
  1354.   			LHASH_COMP_FN(SSL_SESSION_cmp));
  1355.   	if (ret->sessions == NULL) goto err;

crypto/lhash/lhash.c:127:2: Assignment
    125.   	ret->comp=((c == NULL)?(LHASH_COMP_FN_TYPE)strcmp:c);
    126.   	ret->hash=((h == NULL)?(LHASH_HASH_FN_TYPE)lh_strhash:h);
    127.   	ret->num_nodes=MIN_NODES/2;
            ^
    128.   	ret->num_alloc_nodes=MIN_NODES;
    129.   	ret->p=0;

apps/ocsp.c:752:11: Call
750.   #endif
751.   			SSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);
752.   			sbio = BIO_new_ssl(ctx, 1);
                 ^
753.   			cbio = BIO_push(sbio, cbio);
754.   			}

ssl/bio_ssl.c:550:1: Parameter `ctx->sessions->num_nodes`
  548.   	}
  549.   
  550. > BIO *BIO_new_ssl(SSL_CTX *ctx, int client)
  551.   	{
  552.   	BIO *ret;

apps/ocsp.c:897:2: Call
895.   	X509_free(rsigner);
896.   	X509_free(rca_cert);
897.   	TXT_DB_free(rdb);
        ^
898.   	BIO_free_all(cbio);
899.   	BIO_free_all(acbio);

crypto/txt_db/txt_db.c:340:1: Parameter `(*db->index)->num_nodes`
  338.   	}
  339.   
  340. > void TXT_DB_free(TXT_DB *db)
  341.   	{
  342.   	int i,n;

apps/ocsp.c:914:3: Call
912.   		OPENSSL_free(port);
913.   		OPENSSL_free(path);
914.   		SSL_CTX_free(ctx);
         ^
915.   		}
916.   

ssl/ssl_lib.c:1406:1: Parameter `a->sessions->num_nodes`
  1404.   #endif
  1405.   
  1406. > void SSL_CTX_free(SSL_CTX *a)
  1407.   	{
  1408.   	int i;

ssl/ssl_lib.c:1435:3: Call
  1433.   	 */
  1434.   	if (a->sessions != NULL)
  1435.   		SSL_CTX_flush_sessions(a,0);
            ^
  1436.   
  1437.   	CRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);

ssl/ssl_sess.c:678:1: Parameter `s->sessions->num_nodes`
    676.   static IMPLEMENT_LHASH_DOALL_ARG_FN(timeout, SSL_SESSION *, TIMEOUT_PARAM *)
    677.   
    678. > void SSL_CTX_flush_sessions(SSL_CTX *s, long t)
    679.   	{
    680.   	unsigned long i;

ssl/ssl_sess.c:690:2: Call
    688.   	i=tp.cache->down_load;
    689.   	tp.cache->down_load=0;
    690.   	lh_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout), &tp);
            ^
    691.   	tp.cache->down_load=i;
    692.   	CRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);

crypto/lhash/lhash.c:300:1: Parameter `lh->num_nodes`
      298.   	}
      299.   
      300. > void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      301.   	{
      302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);

crypto/lhash/lhash.c:302:2: Call
      300.   void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)
      301.   	{
      302.   	doall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);
              ^
      303.   	}
      304.   

crypto/lhash/lhash.c:270:1: <LHS trace>
268.   	}
269.   
270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
272.   	{

crypto/lhash/lhash.c:270:1: Parameter `lh->num_nodes`
        268.   	}
        269.   
        270. > static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
        271.   			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
        272.   	{

crypto/lhash/lhash.c:278:7: Binary operation: ([0, 8] - 1):unsigned32 by call to `SSL_CTX_free` 
        276.   	/* reverse the order so we search from 'top to bottom'
        277.   	 * We were having memory leaks otherwise */
        278.   	for (i=lh->num_nodes-1; i>=0; i--)
                     ^
        279.   		{
        280.   		a=lh->b[i];

static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,
			  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)
	{
	int i;
	LHASH_NODE *a,*n;
	for (i=lh->num_nodes-1; i>=0; i--)
		{
		a=lh->b[i];
		while (a != NULL)
			{
			n=a->next;
			if(use_arg)
				func_arg(a->data,arg);
			else
				func(a->data);
			a=n;
			}
		}
	}
['int MAIN(int argc, char **argv)\n\t{\n\tENGINE *e = NULL;\n\tchar **args;\n\tchar *host = NULL, *port = NULL, *path = "/";\n\tchar *reqin = NULL, *respin = NULL;\n\tchar *reqout = NULL, *respout = NULL;\n\tchar *signfile = NULL, *keyfile = NULL;\n\tchar *rsignfile = NULL, *rkeyfile = NULL;\n\tchar *outfile = NULL;\n\tint add_nonce = 1, noverify = 0, use_ssl = -1;\n\tOCSP_REQUEST *req = NULL;\n\tOCSP_RESPONSE *resp = NULL;\n\tOCSP_BASICRESP *bs = NULL;\n\tX509 *issuer = NULL, *cert = NULL;\n\tX509 *signer = NULL, *rsigner = NULL;\n\tEVP_PKEY *key = NULL, *rkey = NULL;\n\tBIO *acbio = NULL, *cbio = NULL;\n\tBIO *derbio = NULL;\n\tBIO *out = NULL;\n\tint req_text = 0, resp_text = 0;\n\tlong nsec = MAX_VALIDITY_PERIOD, maxage = -1;\n\tchar *CAfile = NULL, *CApath = NULL;\n\tX509_STORE *store = NULL;\n\tSSL_CTX *ctx = NULL;\n\tSTACK_OF(X509) *sign_other = NULL, *verify_other = NULL, *rother = NULL;\n\tchar *sign_certfile = NULL, *verify_certfile = NULL, *rcertfile = NULL;\n\tunsigned long sign_flags = 0, verify_flags = 0, rflags = 0;\n\tint ret = 1;\n\tint accept_count = -1;\n\tint badarg = 0;\n\tint i;\n\tSTACK *reqnames = NULL;\n\tSTACK_OF(OCSP_CERTID) *ids = NULL;\n\tX509 *rca_cert = NULL;\n\tchar *ridx_filename = NULL;\n\tchar *rca_filename = NULL;\n\tTXT_DB *rdb = NULL;\n\tint nmin = 0, ndays = -1;\n\tif (bio_err == NULL) bio_err = BIO_new_fp(stderr, BIO_NOCLOSE);\n\tif (!load_config(bio_err, NULL))\n\t\tgoto end;\n\tSSL_load_error_strings();\n\targs = argv + 1;\n\treqnames = sk_new_null();\n\tids = sk_OCSP_CERTID_new_null();\n\twhile (!badarg && *args && *args[0] == \'-\')\n\t\t{\n\t\tif (!strcmp(*args, "-out"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\toutfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-url"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tif (!OCSP_parse_url(*args, &host, &port, &path, &use_ssl))\n\t\t\t\t\t{\n\t\t\t\t\tBIO_printf(bio_err, "Error parsing URL\\n");\n\t\t\t\t\tbadarg = 1;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-host"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\thost = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-port"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tport = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-noverify"))\n\t\t\tnoverify = 1;\n\t\telse if (!strcmp(*args, "-nonce"))\n\t\t\tadd_nonce = 2;\n\t\telse if (!strcmp(*args, "-no_nonce"))\n\t\t\tadd_nonce = 0;\n\t\telse if (!strcmp(*args, "-resp_no_certs"))\n\t\t\trflags |= OCSP_NOCERTS;\n\t\telse if (!strcmp(*args, "-resp_key_id"))\n\t\t\trflags |= OCSP_RESPID_KEY;\n\t\telse if (!strcmp(*args, "-no_certs"))\n\t\t\tsign_flags |= OCSP_NOCERTS;\n\t\telse if (!strcmp(*args, "-no_signature_verify"))\n\t\t\tverify_flags |= OCSP_NOSIGS;\n\t\telse if (!strcmp(*args, "-no_cert_verify"))\n\t\t\tverify_flags |= OCSP_NOVERIFY;\n\t\telse if (!strcmp(*args, "-no_chain"))\n\t\t\tverify_flags |= OCSP_NOCHAIN;\n\t\telse if (!strcmp(*args, "-no_cert_checks"))\n\t\t\tverify_flags |= OCSP_NOCHECKS;\n\t\telse if (!strcmp(*args, "-no_explicit"))\n\t\t\tverify_flags |= OCSP_NOEXPLICIT;\n\t\telse if (!strcmp(*args, "-trust_other"))\n\t\t\tverify_flags |= OCSP_TRUSTOTHER;\n\t\telse if (!strcmp(*args, "-no_intern"))\n\t\t\tverify_flags |= OCSP_NOINTERN;\n\t\telse if (!strcmp(*args, "-text"))\n\t\t\t{\n\t\t\treq_text = 1;\n\t\t\tresp_text = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-req_text"))\n\t\t\treq_text = 1;\n\t\telse if (!strcmp(*args, "-resp_text"))\n\t\t\tresp_text = 1;\n\t\telse if (!strcmp(*args, "-reqin"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\treqin = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-respin"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\trespin = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-signer"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tsignfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-VAfile"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tverify_certfile = *args;\n\t\t\t\tverify_flags |= OCSP_TRUSTOTHER;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-sign_other"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tsign_certfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-verify_other"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tverify_certfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-CAfile"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tCAfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-CApath"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tCApath = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-validity_period"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tnsec = atol(*args);\n\t\t\t\tif (nsec < 0)\n\t\t\t\t\t{\n\t\t\t\t\tBIO_printf(bio_err,\n\t\t\t\t\t\t"Illegal validity period %s\\n",\n\t\t\t\t\t\t*args);\n\t\t\t\t\tbadarg = 1;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-status_age"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tmaxage = atol(*args);\n\t\t\t\tif (maxage < 0)\n\t\t\t\t\t{\n\t\t\t\t\tBIO_printf(bio_err,\n\t\t\t\t\t\t"Illegal validity age %s\\n",\n\t\t\t\t\t\t*args);\n\t\t\t\t\tbadarg = 1;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\t else if (!strcmp(*args, "-signkey"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tkeyfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-reqout"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\treqout = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-respout"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\trespout = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\t else if (!strcmp(*args, "-path"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tpath = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-issuer"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tX509_free(issuer);\n\t\t\t\tissuer = load_cert(bio_err, *args, FORMAT_PEM,\n\t\t\t\t\tNULL, e, "issuer certificate");\n\t\t\t\tif(!issuer) goto end;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-cert"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tX509_free(cert);\n\t\t\t\tcert = load_cert(bio_err, *args, FORMAT_PEM,\n\t\t\t\t\tNULL, e, "certificate");\n\t\t\t\tif(!cert) goto end;\n\t\t\t\tif(!add_ocsp_cert(&req, cert, issuer, ids))\n\t\t\t\t\tgoto end;\n\t\t\t\tif(!sk_push(reqnames, *args))\n\t\t\t\t\tgoto end;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-serial"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tif(!add_ocsp_serial(&req, *args, issuer, ids))\n\t\t\t\t\tgoto end;\n\t\t\t\tif(!sk_push(reqnames, *args))\n\t\t\t\t\tgoto end;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-index"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tridx_filename = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-CA"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\trca_filename = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-nmin"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tnmin = atol(*args);\n\t\t\t\tif (nmin < 0)\n\t\t\t\t\t{\n\t\t\t\t\tBIO_printf(bio_err,\n\t\t\t\t\t\t"Illegal update period %s\\n",\n\t\t\t\t\t\t*args);\n\t\t\t\t\tbadarg = 1;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\tif (ndays == -1)\n\t\t\t\t\tndays = 0;\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-nrequest"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\taccept_count = atol(*args);\n\t\t\t\tif (accept_count < 0)\n\t\t\t\t\t{\n\t\t\t\t\tBIO_printf(bio_err,\n\t\t\t\t\t\t"Illegal accept count %s\\n",\n\t\t\t\t\t\t*args);\n\t\t\t\t\tbadarg = 1;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp (*args, "-ndays"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\tndays = atol(*args);\n\t\t\t\tif (ndays < 0)\n\t\t\t\t\t{\n\t\t\t\t\tBIO_printf(bio_err,\n\t\t\t\t\t\t"Illegal update period %s\\n",\n\t\t\t\t\t\t*args);\n\t\t\t\t\tbadarg = 1;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-rsigner"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\trsignfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-rkey"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\trkeyfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse if (!strcmp(*args, "-rother"))\n\t\t\t{\n\t\t\tif (args[1])\n\t\t\t\t{\n\t\t\t\targs++;\n\t\t\t\trcertfile = *args;\n\t\t\t\t}\n\t\t\telse badarg = 1;\n\t\t\t}\n\t\telse badarg = 1;\n\t\targs++;\n\t\t}\n\tif (!req && !reqin && !respin && !(port && ridx_filename)) badarg = 1;\n\tif (badarg)\n\t\t{\n\t\tBIO_printf (bio_err, "OCSP utility\\n");\n\t\tBIO_printf (bio_err, "Usage ocsp [options]\\n");\n\t\tBIO_printf (bio_err, "where options are\\n");\n\t\tBIO_printf (bio_err, "-out file          output filename\\n");\n\t\tBIO_printf (bio_err, "-issuer file       issuer certificate\\n");\n\t\tBIO_printf (bio_err, "-cert file         certificate to check\\n");\n\t\tBIO_printf (bio_err, "-serial n          serial number to check\\n");\n\t\tBIO_printf (bio_err, "-signer file       certificate to sign OCSP request with\\n");\n\t\tBIO_printf (bio_err, "-signkey file      private key to sign OCSP request with\\n");\n\t\tBIO_printf (bio_err, "-sign_certs file   additional certificates to include in signed request\\n");\n\t\tBIO_printf (bio_err, "-no_certs          don\'t include any certificates in signed request\\n");\n\t\tBIO_printf (bio_err, "-req_text          print text form of request\\n");\n\t\tBIO_printf (bio_err, "-resp_text         print text form of response\\n");\n\t\tBIO_printf (bio_err, "-text              print text form of request and response\\n");\n\t\tBIO_printf (bio_err, "-reqout file       write DER encoded OCSP request to \\"file\\"\\n");\n\t\tBIO_printf (bio_err, "-respout file      write DER encoded OCSP reponse to \\"file\\"\\n");\n\t\tBIO_printf (bio_err, "-reqin file        read DER encoded OCSP request from \\"file\\"\\n");\n\t\tBIO_printf (bio_err, "-respin file       read DER encoded OCSP reponse from \\"file\\"\\n");\n\t\tBIO_printf (bio_err, "-nonce             add OCSP nonce to request\\n");\n\t\tBIO_printf (bio_err, "-no_nonce          don\'t add OCSP nonce to request\\n");\n\t\tBIO_printf (bio_err, "-url URL           OCSP responder URL\\n");\n\t\tBIO_printf (bio_err, "-host host:n       send OCSP request to host on port n\\n");\n\t\tBIO_printf (bio_err, "-path              path to use in OCSP request\\n");\n\t\tBIO_printf (bio_err, "-CApath dir        trusted certificates directory\\n");\n\t\tBIO_printf (bio_err, "-CAfile file       trusted certificates file\\n");\n\t\tBIO_printf (bio_err, "-VAfile file       validator certificates file\\n");\n\t\tBIO_printf (bio_err, "-validity_period n maximum validity discrepancy in seconds\\n");\n\t\tBIO_printf (bio_err, "-status_age n      maximum status age in seconds\\n");\n\t\tBIO_printf (bio_err, "-noverify          don\'t verify response at all\\n");\n\t\tBIO_printf (bio_err, "-verify_certs file additional certificates to search for signer\\n");\n\t\tBIO_printf (bio_err, "-trust_other       don\'t verify additional certificates\\n");\n\t\tBIO_printf (bio_err, "-no_intern         don\'t search certificates contained in response for signer\\n");\n\t\tBIO_printf (bio_err, "-no_sig_verify     don\'t check signature on response\\n");\n\t\tBIO_printf (bio_err, "-no_cert_verify    don\'t check signing certificate\\n");\n\t\tBIO_printf (bio_err, "-no_chain          don\'t chain verify response\\n");\n\t\tBIO_printf (bio_err, "-no_cert_checks    don\'t do additional checks on signing certificate\\n");\n\t\tBIO_printf (bio_err, "-port num\t\t port to run responder on\\n");\n\t\tBIO_printf (bio_err, "-index file\t certificate status index file\\n");\n\t\tBIO_printf (bio_err, "-CA file\t\t CA certificate\\n");\n\t\tBIO_printf (bio_err, "-rsigner file\t responder certificate to sign responses with\\n");\n\t\tBIO_printf (bio_err, "-rkey file\t responder key to sign responses with\\n");\n\t\tBIO_printf (bio_err, "-rother file\t other certificates to include in response\\n");\n\t\tBIO_printf (bio_err, "-resp_no_certs     don\'t include any certificates in response\\n");\n\t\tBIO_printf (bio_err, "-nmin n\t \t number of minutes before next update\\n");\n\t\tBIO_printf (bio_err, "-ndays n\t \t number of days before next update\\n");\n\t\tBIO_printf (bio_err, "-resp_key_id       identify reponse by signing certificate key ID\\n");\n\t\tBIO_printf (bio_err, "-nrequest n        number of requests to accept (default unlimited)\\n");\n\t\tgoto end;\n\t\t}\n\tif(outfile) out = BIO_new_file(outfile, "w");\n\telse out = BIO_new_fp(stdout, BIO_NOCLOSE);\n\tif(!out)\n\t\t{\n\t\tBIO_printf(bio_err, "Error opening output file\\n");\n\t\tgoto end;\n\t\t}\n\tif (!req && (add_nonce != 2)) add_nonce = 0;\n\tif (!req && reqin)\n\t\t{\n\t\tderbio = BIO_new_file(reqin, "rb");\n\t\tif (!derbio)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error Opening OCSP request file\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\treq = d2i_OCSP_REQUEST_bio(derbio, NULL);\n\t\tBIO_free(derbio);\n\t\tif(!req)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error reading OCSP request\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\t}\n\tif (!req && port)\n\t\t{\n\t\tacbio = init_responder(port);\n\t\tif (!acbio)\n\t\t\tgoto end;\n\t\t}\n\tif (rsignfile && !rdb)\n\t\t{\n\t\tif (!rkeyfile) rkeyfile = rsignfile;\n\t\trsigner = load_cert(bio_err, rsignfile, FORMAT_PEM,\n\t\t\tNULL, e, "responder certificate");\n\t\tif (!rsigner)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error loading responder certificate\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\trca_cert = load_cert(bio_err, rca_filename, FORMAT_PEM,\n\t\t\tNULL, e, "CA certificate");\n\t\tif (rcertfile)\n\t\t\t{\n\t\t\trother = load_certs(bio_err, rcertfile, FORMAT_PEM,\n\t\t\t\tNULL, e, "responder other certificates");\n\t\t\tif (!rother) goto end;\n\t\t\t}\n\t\trkey = load_key(bio_err, rkeyfile, FORMAT_PEM, 0, NULL, NULL,\n\t\t\t"responder private key");\n\t\tif (!rkey)\n\t\t\tgoto end;\n\t\t}\n\tif(acbio)\n\t\tBIO_printf(bio_err, "Waiting for OCSP client connections...\\n");\n\tredo_accept:\n\tif (acbio)\n\t\t{\n\t\tif (!do_responder(&req, &cbio, acbio, port))\n\t\t\tgoto end;\n\t\tif (!req)\n\t\t\t{\n\t\t\tresp = OCSP_response_create(OCSP_RESPONSE_STATUS_MALFORMEDREQUEST, NULL);\n\t\t\tsend_ocsp_response(cbio, resp);\n\t\t\tgoto done_resp;\n\t\t\t}\n\t\t}\n\tif (!req && (signfile || reqout || host || add_nonce || ridx_filename))\n\t\t{\n\t\tBIO_printf(bio_err, "Need an OCSP request for this operation!\\n");\n\t\tgoto end;\n\t\t}\n\tif (req && add_nonce) OCSP_request_add1_nonce(req, NULL, -1);\n\tif (signfile)\n\t\t{\n\t\tif (!keyfile) keyfile = signfile;\n\t\tsigner = load_cert(bio_err, signfile, FORMAT_PEM,\n\t\t\tNULL, e, "signer certificate");\n\t\tif (!signer)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error loading signer certificate\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\tif (sign_certfile)\n\t\t\t{\n\t\t\tsign_other = load_certs(bio_err, sign_certfile, FORMAT_PEM,\n\t\t\t\tNULL, e, "signer certificates");\n\t\t\tif (!sign_other) goto end;\n\t\t\t}\n\t\tkey = load_key(bio_err, keyfile, FORMAT_PEM, 0, NULL, NULL,\n\t\t\t"signer private key");\n\t\tif (!key)\n\t\t\tgoto end;\n\t\tif (!OCSP_request_sign(req, signer, key, EVP_sha1(), sign_other, sign_flags))\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error signing OCSP request\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\t}\n\tif (req_text && req) OCSP_REQUEST_print(out, req, 0);\n\tif (reqout)\n\t\t{\n\t\tderbio = BIO_new_file(reqout, "wb");\n\t\tif(!derbio)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error opening file %s\\n", reqout);\n\t\t\tgoto end;\n\t\t\t}\n\t\ti2d_OCSP_REQUEST_bio(derbio, req);\n\t\tBIO_free(derbio);\n\t\t}\n\tif (ridx_filename && (!rkey || !rsigner || !rca_cert))\n\t\t{\n\t\tBIO_printf(bio_err, "Need a responder certificate, key and CA for this operation!\\n");\n\t\tgoto end;\n\t\t}\n\tif (ridx_filename && !rdb)\n\t\t{\n\t\tBIO *db_bio = NULL;\n\t\tdb_bio = BIO_new_file(ridx_filename, "r");\n\t\tif (!db_bio)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error opening index file %s\\n", ridx_filename);\n\t\t\tgoto end;\n\t\t\t}\n\t\trdb = TXT_DB_read(db_bio, DB_NUMBER);\n\t\tBIO_free(db_bio);\n\t\tif (!rdb)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error reading index file %s\\n", ridx_filename);\n\t\t\tgoto end;\n\t\t\t}\n\t\tif (!make_serial_index(rdb))\n\t\t\tgoto end;\n\t\t}\n\tif (rdb)\n\t\t{\n\t\ti = make_ocsp_response(&resp, req, rdb, rca_cert, rsigner, rkey, rother, rflags, nmin, ndays);\n\t\tif (cbio)\n\t\t\tsend_ocsp_response(cbio, resp);\n\t\t}\n\telse if (host)\n\t\t{\n#ifndef OPENSSL_NO_SOCK\n\t\tcbio = BIO_new_connect(host);\n#else\n\t\tBIO_printf(bio_err, "Error creating connect BIO - sockets not supported.\\n");\n\t\tgoto end;\n#endif\n\t\tif (!cbio)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error creating connect BIO\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\tif (port) BIO_set_conn_port(cbio, port);\n\t\tif (use_ssl == 1)\n\t\t\t{\n\t\t\tBIO *sbio;\n#if !defined(OPENSSL_NO_SSL2) && !defined(OPENSSL_NO_SSL3)\n\t\t\tctx = SSL_CTX_new(SSLv23_client_method());\n#elif !defined(OPENSSL_NO_SSL3)\n\t\t\tctx = SSL_CTX_new(SSLv3_client_method());\n#elif !defined(OPENSSL_NO_SSL2)\n\t\t\tctx = SSL_CTX_new(SSLv2_client_method());\n#else\n\t\t\tBIO_printf(bio_err, "SSL is disabled\\n");\n\t\t\tgoto end;\n#endif\n\t\t\tSSL_CTX_set_mode(ctx, SSL_MODE_AUTO_RETRY);\n\t\t\tsbio = BIO_new_ssl(ctx, 1);\n\t\t\tcbio = BIO_push(sbio, cbio);\n\t\t\t}\n\t\tif (BIO_do_connect(cbio) <= 0)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error connecting BIO\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\tresp = OCSP_sendreq_bio(cbio, path, req);\n\t\tBIO_free_all(cbio);\n\t\tcbio = NULL;\n\t\tif (!resp)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error querying OCSP responsder\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\t}\n\telse if (respin)\n\t\t{\n\t\tderbio = BIO_new_file(respin, "rb");\n\t\tif (!derbio)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error Opening OCSP response file\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\tresp = d2i_OCSP_RESPONSE_bio(derbio, NULL);\n\t\tBIO_free(derbio);\n\t\tif(!resp)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error reading OCSP response\\n");\n\t\t\tgoto end;\n\t\t\t}\n\t\t}\n\telse\n\t\t{\n\t\tret = 0;\n\t\tgoto end;\n\t\t}\n\tdone_resp:\n\tif (respout)\n\t\t{\n\t\tderbio = BIO_new_file(respout, "wb");\n\t\tif(!derbio)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Error opening file %s\\n", respout);\n\t\t\tgoto end;\n\t\t\t}\n\t\ti2d_OCSP_RESPONSE_bio(derbio, resp);\n\t\tBIO_free(derbio);\n\t\t}\n\ti = OCSP_response_status(resp);\n\tif (i != OCSP_RESPONSE_STATUS_SUCCESSFUL)\n\t\t{\n\t\tBIO_printf(out, "Responder Error: %s (%ld)\\n",\n\t\t\t\tOCSP_response_status_str(i), i);\n\t\tret = 0;\n\t\tgoto end;\n\t\t}\n\tif (resp_text) OCSP_RESPONSE_print(out, resp, 0);\n\tif (cbio)\n\t\t{\n\t\tif (accept_count > 0)\n\t\t\taccept_count--;\n\t\tif (accept_count)\n\t\t\t{\n\t\t\tBIO_free_all(cbio);\n\t\t\tcbio = NULL;\n\t\t\tOCSP_REQUEST_free(req);\n\t\t\treq = NULL;\n\t\t\tOCSP_RESPONSE_free(resp);\n\t\t\tresp = NULL;\n\t\t\tgoto redo_accept;\n\t\t\t}\n\t\tgoto end;\n\t\t}\n\tif (!store)\n\t\tstore = setup_verify(bio_err, CAfile, CApath);\n\tif (!store)\n\t\tgoto end;\n\tif (verify_certfile)\n\t\t{\n\t\tverify_other = load_certs(bio_err, verify_certfile, FORMAT_PEM,\n\t\t\tNULL, e, "validator certificate");\n\t\tif (!verify_other) goto end;\n\t\t}\n\tbs = OCSP_response_get1_basic(resp);\n\tif (!bs)\n\t\t{\n\t\tBIO_printf(bio_err, "Error parsing response\\n");\n\t\tgoto end;\n\t\t}\n\tif (!noverify)\n\t\t{\n\t\tif (req && ((i = OCSP_check_nonce(req, bs)) <= 0))\n\t\t\t{\n\t\t\tif (i == -1)\n\t\t\t\tBIO_printf(bio_err, "WARNING: no nonce in response\\n");\n\t\t\telse\n\t\t\t\t{\n\t\t\t\tBIO_printf(bio_err, "Nonce Verify error\\n");\n\t\t\t\tgoto end;\n\t\t\t\t}\n\t\t\t}\n\t\ti = OCSP_basic_verify(bs, verify_other, store, verify_flags);\n                if (i < 0) i = OCSP_basic_verify(bs, NULL, store, 0);\n\t\tif(i <= 0)\n\t\t\t{\n\t\t\tBIO_printf(bio_err, "Response Verify Failure\\n", i);\n\t\t\tERR_print_errors(bio_err);\n\t\t\t}\n\t\telse\n\t\t\tBIO_printf(bio_err, "Response verify OK\\n");\n\t\t}\n\tif (!print_ocsp_summary(out, bs, req, reqnames, ids, nsec, maxage))\n\t\tgoto end;\n\tret = 0;\nend:\n\tERR_print_errors(bio_err);\n\tX509_free(signer);\n\tX509_STORE_free(store);\n\tEVP_PKEY_free(key);\n\tEVP_PKEY_free(rkey);\n\tX509_free(issuer);\n\tX509_free(cert);\n\tX509_free(rsigner);\n\tX509_free(rca_cert);\n\tTXT_DB_free(rdb);\n\tBIO_free_all(cbio);\n\tBIO_free_all(acbio);\n\tBIO_free(out);\n\tOCSP_REQUEST_free(req);\n\tOCSP_RESPONSE_free(resp);\n\tOCSP_BASICRESP_free(bs);\n\tsk_free(reqnames);\n\tsk_OCSP_CERTID_free(ids);\n\tsk_X509_pop_free(sign_other, X509_free);\n\tsk_X509_pop_free(verify_other, X509_free);\n\tif (use_ssl != -1)\n\t\t{\n\t\tOPENSSL_free(host);\n\t\tOPENSSL_free(port);\n\t\tOPENSSL_free(path);\n\t\tSSL_CTX_free(ctx);\n\t\t}\n\tOPENSSL_EXIT(ret);\n}', 'SSL_CTX *SSL_CTX_new(SSL_METHOD *meth)\n\t{\n\tSSL_CTX *ret=NULL;\n\tif (meth == NULL)\n\t\t{\n\t\tSSLerr(SSL_F_SSL_CTX_NEW,SSL_R_NULL_SSL_METHOD_PASSED);\n\t\treturn(NULL);\n\t\t}\n\tif (SSL_get_ex_data_X509_STORE_CTX_idx() < 0)\n\t\t{\n\t\tSSLerr(SSL_F_SSL_CTX_NEW,SSL_R_X509_VERIFICATION_SETUP_PROBLEMS);\n\t\tgoto err;\n\t\t}\n\tret=(SSL_CTX *)OPENSSL_malloc(sizeof(SSL_CTX));\n\tif (ret == NULL)\n\t\tgoto err;\n\tmemset(ret,0,sizeof(SSL_CTX));\n\tret->method=meth;\n\tret->cert_store=NULL;\n\tret->session_cache_mode=SSL_SESS_CACHE_SERVER;\n\tret->session_cache_size=SSL_SESSION_CACHE_MAX_SIZE_DEFAULT;\n\tret->session_cache_head=NULL;\n\tret->session_cache_tail=NULL;\n\tret->session_timeout=meth->get_timeout();\n\tret->new_session_cb=0;\n\tret->remove_session_cb=0;\n\tret->get_session_cb=0;\n\tret->generate_session_id=0;\n\tmemset((char *)&ret->stats,0,sizeof(ret->stats));\n\tret->references=1;\n\tret->quiet_shutdown=0;\n\tret->info_callback=NULL;\n\tret->app_verify_callback=0;\n\tret->app_verify_arg=NULL;\n\tret->max_cert_list=SSL_MAX_CERT_LIST_DEFAULT;\n\tret->read_ahead=0;\n\tret->msg_callback=0;\n\tret->msg_callback_arg=NULL;\n\tret->verify_mode=SSL_VERIFY_NONE;\n\tret->verify_depth=-1;\n\tret->sid_ctx_length=0;\n\tret->default_verify_callback=NULL;\n\tif ((ret->cert=ssl_cert_new()) == NULL)\n\t\tgoto err;\n\tret->default_passwd_callback=0;\n\tret->default_passwd_callback_userdata=NULL;\n\tret->client_cert_cb=0;\n\tret->sessions=lh_new(LHASH_HASH_FN(SSL_SESSION_hash),\n\t\t\tLHASH_COMP_FN(SSL_SESSION_cmp));\n\tif (ret->sessions == NULL) goto err;\n\tret->cert_store=X509_STORE_new();\n\tif (ret->cert_store == NULL) goto err;\n\tssl_create_cipher_list(ret->method,\n\t\t&ret->cipher_list,&ret->cipher_list_by_id,\n\t\tSSL_DEFAULT_CIPHER_LIST);\n\tif (ret->cipher_list == NULL\n\t    || sk_SSL_CIPHER_num(ret->cipher_list) <= 0)\n\t\t{\n\t\tSSLerr(SSL_F_SSL_CTX_NEW,SSL_R_LIBRARY_HAS_NO_CIPHERS);\n\t\tgoto err2;\n\t\t}\n\tif ((ret->rsa_md5=EVP_get_digestbyname("ssl2-md5")) == NULL)\n\t\t{\n\t\tSSLerr(SSL_F_SSL_CTX_NEW,SSL_R_UNABLE_TO_LOAD_SSL2_MD5_ROUTINES);\n\t\tgoto err2;\n\t\t}\n\tif ((ret->md5=EVP_get_digestbyname("ssl3-md5")) == NULL)\n\t\t{\n\t\tSSLerr(SSL_F_SSL_CTX_NEW,SSL_R_UNABLE_TO_LOAD_SSL3_MD5_ROUTINES);\n\t\tgoto err2;\n\t\t}\n\tif ((ret->sha1=EVP_get_digestbyname("ssl3-sha1")) == NULL)\n\t\t{\n\t\tSSLerr(SSL_F_SSL_CTX_NEW,SSL_R_UNABLE_TO_LOAD_SSL3_SHA1_ROUTINES);\n\t\tgoto err2;\n\t\t}\n\tif ((ret->client_CA=sk_X509_NAME_new_null()) == NULL)\n\t\tgoto err;\n\tCRYPTO_new_ex_data(CRYPTO_EX_INDEX_SSL_CTX, ret, &ret->ex_data);\n\tret->extra_certs=NULL;\n\tret->comp_methods=SSL_COMP_get_compression_methods();\n\treturn(ret);\nerr:\n\tSSLerr(SSL_F_SSL_CTX_NEW,ERR_R_MALLOC_FAILURE);\nerr2:\n\tif (ret != NULL) SSL_CTX_free(ret);\n\treturn(NULL);\n\t}', 'LHASH *lh_new(LHASH_HASH_FN_TYPE h, LHASH_COMP_FN_TYPE c)\n\t{\n\tLHASH *ret;\n\tint i;\n\tif ((ret=(LHASH *)OPENSSL_malloc(sizeof(LHASH))) == NULL)\n\t\tgoto err0;\n\tif ((ret->b=(LHASH_NODE **)OPENSSL_malloc(sizeof(LHASH_NODE *)*MIN_NODES)) == NULL)\n\t\tgoto err1;\n\tfor (i=0; i<MIN_NODES; i++)\n\t\tret->b[i]=NULL;\n\tret->comp=((c == NULL)?(LHASH_COMP_FN_TYPE)strcmp:c);\n\tret->hash=((h == NULL)?(LHASH_HASH_FN_TYPE)lh_strhash:h);\n\tret->num_nodes=MIN_NODES/2;\n\tret->num_alloc_nodes=MIN_NODES;\n\tret->p=0;\n\tret->pmax=MIN_NODES/2;\n\tret->up_load=UP_LOAD;\n\tret->down_load=DOWN_LOAD;\n\tret->num_items=0;\n\tret->num_expands=0;\n\tret->num_expand_reallocs=0;\n\tret->num_contracts=0;\n\tret->num_contract_reallocs=0;\n\tret->num_hash_calls=0;\n\tret->num_comp_calls=0;\n\tret->num_insert=0;\n\tret->num_replace=0;\n\tret->num_delete=0;\n\tret->num_no_delete=0;\n\tret->num_retrieve=0;\n\tret->num_retrieve_miss=0;\n\tret->num_hash_comps=0;\n\tret->error=0;\n\treturn(ret);\nerr1:\n\tOPENSSL_free(ret);\nerr0:\n\treturn(NULL);\n\t}', 'BIO *BIO_new_ssl(SSL_CTX *ctx, int client)\n\t{\n\tBIO *ret;\n\tSSL *ssl;\n\tif ((ret=BIO_new(BIO_f_ssl())) == NULL)\n\t\treturn(NULL);\n\tif ((ssl=SSL_new(ctx)) == NULL)\n\t\t{\n\t\tBIO_free(ret);\n\t\treturn(NULL);\n\t\t}\n\tif (client)\n\t\tSSL_set_connect_state(ssl);\n\telse\n\t\tSSL_set_accept_state(ssl);\n\tBIO_set_ssl(ret,ssl,BIO_CLOSE);\n\treturn(ret);\n\t}', 'void TXT_DB_free(TXT_DB *db)\n\t{\n\tint i,n;\n\tchar **p,*max;\n\tif(db == NULL)\n\t    return;\n\tif (db->index != NULL)\n\t\t{\n\t\tfor (i=db->num_fields-1; i>=0; i--)\n\t\t\tif (db->index[i] != NULL) lh_free(db->index[i]);\n\t\tOPENSSL_free(db->index);\n\t\t}\n\tif (db->qual != NULL)\n\t\tOPENSSL_free(db->qual);\n\tif (db->data != NULL)\n\t\t{\n\t\tfor (i=sk_num(db->data)-1; i>=0; i--)\n\t\t\t{\n\t\t\tp=(char **)sk_value(db->data,i);\n\t\t\tmax=p[db->num_fields];\n\t\t\tif (max == NULL)\n\t\t\t\t{\n\t\t\t\tfor (n=0; n<db->num_fields; n++)\n\t\t\t\t\tif (p[n] != NULL) OPENSSL_free(p[n]);\n\t\t\t\t}\n\t\t\telse\n\t\t\t\t{\n\t\t\t\tfor (n=0; n<db->num_fields; n++)\n\t\t\t\t\t{\n\t\t\t\t\tif (((p[n] < (char *)p) || (p[n] > max))\n\t\t\t\t\t\t&& (p[n] != NULL))\n\t\t\t\t\t\tOPENSSL_free(p[n]);\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\tOPENSSL_free(sk_value(db->data,i));\n\t\t\t}\n\t\tsk_free(db->data);\n\t\t}\n\tOPENSSL_free(db);\n\t}', 'void SSL_CTX_free(SSL_CTX *a)\n\t{\n\tint i;\n\tif (a == NULL) return;\n\ti=CRYPTO_add(&a->references,-1,CRYPTO_LOCK_SSL_CTX);\n#ifdef REF_PRINT\n\tREF_PRINT("SSL_CTX",a);\n#endif\n\tif (i > 0) return;\n#ifdef REF_CHECK\n\tif (i < 0)\n\t\t{\n\t\tfprintf(stderr,"SSL_CTX_free, bad reference count\\n");\n\t\tabort();\n\t\t}\n#endif\n\tif (a->sessions != NULL)\n\t\tSSL_CTX_flush_sessions(a,0);\n\tCRYPTO_free_ex_data(CRYPTO_EX_INDEX_SSL_CTX, a, &a->ex_data);\n\tif (a->sessions != NULL)\n\t\tlh_free(a->sessions);\n\tif (a->cert_store != NULL)\n\t\tX509_STORE_free(a->cert_store);\n\tif (a->cipher_list != NULL)\n\t\tsk_SSL_CIPHER_free(a->cipher_list);\n\tif (a->cipher_list_by_id != NULL)\n\t\tsk_SSL_CIPHER_free(a->cipher_list_by_id);\n\tif (a->cert != NULL)\n\t\tssl_cert_free(a->cert);\n\tif (a->client_CA != NULL)\n\t\tsk_X509_NAME_pop_free(a->client_CA,X509_NAME_free);\n\tif (a->extra_certs != NULL)\n\t\tsk_X509_pop_free(a->extra_certs,X509_free);\n#if 0\n\tif (a->comp_methods != NULL)\n\t\tsk_SSL_COMP_pop_free(a->comp_methods,SSL_COMP_free);\n#else\n\ta->comp_methods = NULL;\n#endif\n\tOPENSSL_free(a);\n\t}', 'void SSL_CTX_flush_sessions(SSL_CTX *s, long t)\n\t{\n\tunsigned long i;\n\tTIMEOUT_PARAM tp;\n\ttp.ctx=s;\n\ttp.cache=s->sessions;\n\tif (tp.cache == NULL) return;\n\ttp.time=t;\n\tCRYPTO_w_lock(CRYPTO_LOCK_SSL_CTX);\n\ti=tp.cache->down_load;\n\ttp.cache->down_load=0;\n\tlh_doall_arg(tp.cache, LHASH_DOALL_ARG_FN(timeout), &tp);\n\ttp.cache->down_load=i;\n\tCRYPTO_w_unlock(CRYPTO_LOCK_SSL_CTX);\n\t}', 'void lh_doall_arg(LHASH *lh, LHASH_DOALL_ARG_FN_TYPE func, void *arg)\n\t{\n\tdoall_util_fn(lh, 1, (LHASH_DOALL_FN_TYPE)0, func, arg);\n\t}', 'static void doall_util_fn(LHASH *lh, int use_arg, LHASH_DOALL_FN_TYPE func,\n\t\t\t  LHASH_DOALL_ARG_FN_TYPE func_arg, void *arg)\n\t{\n\tint i;\n\tLHASH_NODE *a,*n;\n\tfor (i=lh->num_nodes-1; i>=0; i--)\n\t\t{\n\t\ta=lh->b[i];\n\t\twhile (a != NULL)\n\t\t\t{\n\t\t\tn=a->next;\n\t\t\tif(use_arg)\n\t\t\t\tfunc_arg(a->data,arg);\n\t\t\telse\n\t\t\t\tfunc(a->data);\n\t\t\ta=n;\n\t\t\t}\n\t\t}\n\t}']