ssl/statem/statem_clnt.c:2773: error: MEMORY_LEAK
  memory dynamically allocated by call to `CRYPTO_malloc()` at line 2725, column 11 is not reachable after line 2773, column 5.
Showing all 66 steps of the trace


ssl/statem/statem_clnt.c:2700:1: start of procedure tls_construct_cke_rsa()
2698.   }
2699.   
2700. > static int tls_construct_cke_rsa(SSL *s, WPACKET *pkt, int *al)
2701.   {
2702.   #ifndef OPENSSL_NO_RSA

ssl/statem/statem_clnt.c:2703:5: 
2701.   {
2702.   #ifndef OPENSSL_NO_RSA
2703. >     unsigned char *encdata = NULL;
2704.       EVP_PKEY *pkey = NULL;
2705.       EVP_PKEY_CTX *pctx = NULL;

ssl/statem/statem_clnt.c:2704:5: 
2702.   #ifndef OPENSSL_NO_RSA
2703.       unsigned char *encdata = NULL;
2704. >     EVP_PKEY *pkey = NULL;
2705.       EVP_PKEY_CTX *pctx = NULL;
2706.       size_t enclen;

ssl/statem/statem_clnt.c:2705:5: 
2703.       unsigned char *encdata = NULL;
2704.       EVP_PKEY *pkey = NULL;
2705. >     EVP_PKEY_CTX *pctx = NULL;
2706.       size_t enclen;
2707.       unsigned char *pms = NULL;

ssl/statem/statem_clnt.c:2707:5: 
2705.       EVP_PKEY_CTX *pctx = NULL;
2706.       size_t enclen;
2707. >     unsigned char *pms = NULL;
2708.       size_t pmslen = 0;
2709.   

ssl/statem/statem_clnt.c:2708:5: 
2706.       size_t enclen;
2707.       unsigned char *pms = NULL;
2708. >     size_t pmslen = 0;
2709.   
2710.       if (s->session->peer == NULL) {

ssl/statem/statem_clnt.c:2710:9: Taking false branch
2708.       size_t pmslen = 0;
2709.   
2710.       if (s->session->peer == NULL) {
                ^
2711.           /*
2712.            * We should always have a server certificate with SSL_kRSA.

ssl/statem/statem_clnt.c:2718:5: 
2716.       }
2717.   
2718. >     pkey = X509_get0_pubkey(s->session->peer);
2719.       if (EVP_PKEY_get0_RSA(pkey) == NULL) {
2720.           SSLerr(SSL_F_TLS_CONSTRUCT_CKE_RSA, ERR_R_INTERNAL_ERROR);

crypto/x509/x509_cmp.c:265:1: start of procedure X509_get0_pubkey()
  263.   }
  264.   
  265. > EVP_PKEY *X509_get0_pubkey(const X509 *x)
  266.   {
  267.       if (x == NULL)

crypto/x509/x509_cmp.c:267:9: Taking false branch
  265.   EVP_PKEY *X509_get0_pubkey(const X509 *x)
  266.   {
  267.       if (x == NULL)
                 ^
  268.           return NULL;
  269.       return X509_PUBKEY_get0(x->cert_info.key);

crypto/x509/x509_cmp.c:269:5: 
  267.       if (x == NULL)
  268.           return NULL;
  269. >     return X509_PUBKEY_get0(x->cert_info.key);
  270.   }
  271.   

crypto/x509/x_pubkey.c:140:1: start of procedure X509_PUBKEY_get0()
    138.   }
    139.   
    140. > EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key)
    141.   {
    142.       EVP_PKEY *ret = NULL;

crypto/x509/x_pubkey.c:142:5: 
    140.   EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key)
    141.   {
    142. >     EVP_PKEY *ret = NULL;
    143.   
    144.       if (key == NULL || key->public_key == NULL)

crypto/x509/x_pubkey.c:144:9: Taking false branch
    142.       EVP_PKEY *ret = NULL;
    143.   
    144.       if (key == NULL || key->public_key == NULL)
                   ^
    145.           return NULL;
    146.   

crypto/x509/x_pubkey.c:144:24: Taking false branch
    142.       EVP_PKEY *ret = NULL;
    143.   
    144.       if (key == NULL || key->public_key == NULL)
                                  ^
    145.           return NULL;
    146.   

crypto/x509/x_pubkey.c:147:9: Taking true branch
    145.           return NULL;
    146.   
    147.       if (key->pkey != NULL)
                   ^
    148.           return key->pkey;
    149.   

crypto/x509/x_pubkey.c:148:9: 
    146.   
    147.       if (key->pkey != NULL)
    148. >         return key->pkey;
    149.   
    150.       /*

crypto/x509/x_pubkey.c:166:1: return from a call to X509_PUBKEY_get0
    164.   
    165.       return NULL;
    166. > }
    167.   
    168.   EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key)

crypto/x509/x509_cmp.c:270:1: return from a call to X509_get0_pubkey
  268.           return NULL;
  269.       return X509_PUBKEY_get0(x->cert_info.key);
  270. > }
  271.   
  272.   EVP_PKEY *X509_get_pubkey(X509 *x)

ssl/statem/statem_clnt.c:2719:9: 
2717.   
2718.       pkey = X509_get0_pubkey(s->session->peer);
2719. >     if (EVP_PKEY_get0_RSA(pkey) == NULL) {
2720.           SSLerr(SSL_F_TLS_CONSTRUCT_CKE_RSA, ERR_R_INTERNAL_ERROR);
2721.           return 0;

crypto/evp/p_lib.c:290:1: start of procedure EVP_PKEY_get0_RSA()
  288.   }
  289.   
  290. > RSA *EVP_PKEY_get0_RSA(EVP_PKEY *pkey)
  291.   {
  292.       if (pkey->type != EVP_PKEY_RSA) {

crypto/evp/p_lib.c:292:9: Taking false branch
  290.   RSA *EVP_PKEY_get0_RSA(EVP_PKEY *pkey)
  291.   {
  292.       if (pkey->type != EVP_PKEY_RSA) {
                 ^
  293.           EVPerr(EVP_F_EVP_PKEY_GET0_RSA, EVP_R_EXPECTING_AN_RSA_KEY);
  294.           return NULL;

crypto/evp/p_lib.c:296:5: 
  294.           return NULL;
  295.       }
  296. >     return pkey->pkey.rsa;
  297.   }
  298.   

crypto/evp/p_lib.c:297:1: return from a call to EVP_PKEY_get0_RSA
  295.       }
  296.       return pkey->pkey.rsa;
  297. > }
  298.   
  299.   RSA *EVP_PKEY_get1_RSA(EVP_PKEY *pkey)

ssl/statem/statem_clnt.c:2719:9: Taking false branch
2717.   
2718.       pkey = X509_get0_pubkey(s->session->peer);
2719.       if (EVP_PKEY_get0_RSA(pkey) == NULL) {
                ^
2720.           SSLerr(SSL_F_TLS_CONSTRUCT_CKE_RSA, ERR_R_INTERNAL_ERROR);
2721.           return 0;

ssl/statem/statem_clnt.c:2724:5: 
2722.       }
2723.   
2724. >     pmslen = SSL_MAX_MASTER_KEY_LENGTH;
2725.       pms = OPENSSL_malloc(pmslen);
2726.       if (pms == NULL) {

ssl/statem/statem_clnt.c:2725:5: 
2723.   
2724.       pmslen = SSL_MAX_MASTER_KEY_LENGTH;
2725. >     pms = OPENSSL_malloc(pmslen);
2726.       if (pms == NULL) {
2727.           SSLerr(SSL_F_TLS_CONSTRUCT_CKE_RSA, ERR_R_MALLOC_FAILURE);

crypto/mem.c:158:1: start of procedure CRYPTO_malloc()
  156.   #endif
  157.   
  158. > void *CRYPTO_malloc(size_t num, const char *file, int line)
  159.   {
  160.       void *ret = NULL;

crypto/mem.c:160:5: 
  158.   void *CRYPTO_malloc(size_t num, const char *file, int line)
  159.   {
  160. >     void *ret = NULL;
  161.   
  162.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)

crypto/mem.c:162:9: Taking false branch
  160.       void *ret = NULL;
  161.   
  162.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
                 ^
  163.           return malloc_impl(num, file, line);
  164.   

crypto/mem.c:165:9: Taking false branch
  163.           return malloc_impl(num, file, line);
  164.   
  165.       if (num == 0)
                 ^
  166.           return NULL;
  167.   

crypto/mem.c:169:5: 
  167.   
  168.       FAILTEST();
  169. >     allow_customize = 0;
  170.   #ifndef OPENSSL_NO_CRYPTO_MDEBUG
  171.       if (call_malloc_debug) {

crypto/mem.c:179:5: 
  177.       }
  178.   #else
  179. >     osslargused(file); osslargused(line);
  180.       ret = malloc(num);
  181.   #endif

crypto/mem.c:179:24: 
  177.       }
  178.   #else
  179. >     osslargused(file); osslargused(line);
  180.       ret = malloc(num);
  181.   #endif

crypto/mem.c:180:5: 
  178.   #else
  179.       osslargused(file); osslargused(line);
  180. >     ret = malloc(num);
  181.   #endif
  182.   

crypto/mem.c:183:5: 
  181.   #endif
  182.   
  183. >     return ret;
  184.   }
  185.   

crypto/mem.c:184:1: return from a call to CRYPTO_malloc
  182.   
  183.       return ret;
  184. > }
  185.   
  186.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

ssl/statem/statem_clnt.c:2726:9: Taking false branch
2724.       pmslen = SSL_MAX_MASTER_KEY_LENGTH;
2725.       pms = OPENSSL_malloc(pmslen);
2726.       if (pms == NULL) {
                ^
2727.           SSLerr(SSL_F_TLS_CONSTRUCT_CKE_RSA, ERR_R_MALLOC_FAILURE);
2728.           *al = SSL_AD_INTERNAL_ERROR;

ssl/statem/statem_clnt.c:2732:5: 
2730.       }
2731.   
2732. >     pms[0] = s->client_version >> 8;
2733.       pms[1] = s->client_version & 0xff;
2734.       /* TODO(size_t): Convert this function */

ssl/statem/statem_clnt.c:2733:5: 
2731.   
2732.       pms[0] = s->client_version >> 8;
2733. >     pms[1] = s->client_version & 0xff;
2734.       /* TODO(size_t): Convert this function */
2735.       if (RAND_bytes(pms + 2, (int)(pmslen - 2)) <= 0) {

ssl/statem/statem_clnt.c:2735:9: 
2733.       pms[1] = s->client_version & 0xff;
2734.       /* TODO(size_t): Convert this function */
2735. >     if (RAND_bytes(pms + 2, (int)(pmslen - 2)) <= 0) {
2736.           goto err;
2737.       }

crypto/rand/rand_lib.c:97:1: start of procedure RAND_bytes()
  95.   }
  96.   
  97. > int RAND_bytes(unsigned char *buf, int num)
  98.   {
  99.       const RAND_METHOD *meth = RAND_get_rand_method();

crypto/rand/rand_lib.c:99:5: 
  97.   int RAND_bytes(unsigned char *buf, int num)
  98.   {
  99. >     const RAND_METHOD *meth = RAND_get_rand_method();
  100.       if (meth && meth->bytes)
  101.           return meth->bytes(buf, num);

crypto/rand/rand_lib.c:34:1: start of procedure RAND_get_rand_method()
    32.   }
    33.   
    34. > const RAND_METHOD *RAND_get_rand_method(void)
    35.   {
    36.       if (!default_RAND_meth) {

crypto/rand/rand_lib.c:36:10: Taking false branch
    34.   const RAND_METHOD *RAND_get_rand_method(void)
    35.   {
    36.       if (!default_RAND_meth) {
                   ^
    37.   #ifndef OPENSSL_NO_ENGINE
    38.           ENGINE *e = ENGINE_get_default_RAND();

crypto/rand/rand_lib.c:52:5: 
    50.               default_RAND_meth = RAND_OpenSSL();
    51.       }
    52. >     return default_RAND_meth;
    53.   }
    54.   

crypto/rand/rand_lib.c:53:1: return from a call to RAND_get_rand_method
    51.       }
    52.       return default_RAND_meth;
    53. > }
    54.   
    55.   #ifndef OPENSSL_NO_ENGINE

crypto/rand/rand_lib.c:100:9: Taking true branch
  98.   {
  99.       const RAND_METHOD *meth = RAND_get_rand_method();
  100.       if (meth && meth->bytes)
                 ^
  101.           return meth->bytes(buf, num);
  102.       return (-1);

crypto/rand/rand_lib.c:100:17: Taking false branch
  98.   {
  99.       const RAND_METHOD *meth = RAND_get_rand_method();
  100.       if (meth && meth->bytes)
                         ^
  101.           return meth->bytes(buf, num);
  102.       return (-1);

crypto/rand/rand_lib.c:102:5: 
  100.       if (meth && meth->bytes)
  101.           return meth->bytes(buf, num);
  102. >     return (-1);
  103.   }
  104.   

crypto/rand/rand_lib.c:103:1: return from a call to RAND_bytes
  101.           return meth->bytes(buf, num);
  102.       return (-1);
  103. > }
  104.   
  105.   #if OPENSSL_API_COMPAT < 0x10100000L

ssl/statem/statem_clnt.c:2735:9: Taking true branch
2733.       pms[1] = s->client_version & 0xff;
2734.       /* TODO(size_t): Convert this function */
2735.       if (RAND_bytes(pms + 2, (int)(pmslen - 2)) <= 0) {
                ^
2736.           goto err;
2737.       }

ssl/statem/statem_clnt.c:2772:2: 
2770.   
2771.       return 1;
2772. >  err:
2773.       OPENSSL_clear_free(pms, pmslen);
2774.       EVP_PKEY_CTX_free(pctx);

ssl/statem/statem_clnt.c:2773:5: 
2771.       return 1;
2772.    err:
2773. >     OPENSSL_clear_free(pms, pmslen);
2774.       EVP_PKEY_CTX_free(pctx);
2775.   

crypto/mem.c:273:1: start of procedure CRYPTO_clear_free()
  271.   }
  272.   
  273. > void CRYPTO_clear_free(void *str, size_t num, const char *file, int line)
  274.   {
  275.       if (str == NULL)

crypto/mem.c:275:9: Taking false branch
  273.   void CRYPTO_clear_free(void *str, size_t num, const char *file, int line)
  274.   {
  275.       if (str == NULL)
                 ^
  276.           return;
  277.       if (num)

crypto/mem.c:277:9: Taking true branch
  275.       if (str == NULL)
  276.           return;
  277.       if (num)
                 ^
  278.           OPENSSL_cleanse(str, num);
  279.       CRYPTO_free(str, file, line);

crypto/mem.c:278:9: Skipping OPENSSL_cleanse(): method has no implementation
  276.           return;
  277.       if (num)
  278.           OPENSSL_cleanse(str, num);
                 ^
  279.       CRYPTO_free(str, file, line);
  280.   }

crypto/mem.c:279:5: 
  277.       if (num)
  278.           OPENSSL_cleanse(str, num);
  279. >     CRYPTO_free(str, file, line);
  280.   }

crypto/mem.c:253:1: start of procedure CRYPTO_free()
    251.   }
    252.   
    253. > void CRYPTO_free(void *str, const char *file, int line)
    254.   {
    255.       if (free_impl != NULL && free_impl != &CRYPTO_free) {

crypto/mem.c:255:9: Taking true branch
    253.   void CRYPTO_free(void *str, const char *file, int line)
    254.   {
    255.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
                   ^
    256.           free_impl(str, file, line);
    257.           return;

crypto/mem.c:255:30: Taking true branch
    253.   void CRYPTO_free(void *str, const char *file, int line)
    254.   {
    255.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
                                        ^
    256.           free_impl(str, file, line);
    257.           return;

crypto/mem.c:256:9: Skipping __function_pointer__(): unresolved function pointer
    254.   {
    255.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
    256.           free_impl(str, file, line);
                   ^
    257.           return;
    258.       }

crypto/mem.c:257:9: 
    255.       if (free_impl != NULL && free_impl != &CRYPTO_free) {
    256.           free_impl(str, file, line);
    257. >         return;
    258.       }
    259.   

crypto/mem.c:271:1: return from a call to CRYPTO_free
    269.       free(str);
    270.   #endif
    271. > }
    272.   
    273.   void CRYPTO_clear_free(void *str, size_t num, const char *file, int line)

crypto/mem.c:280:1: return from a call to CRYPTO_clear_free
  278.           OPENSSL_cleanse(str, num);
  279.       CRYPTO_free(str, file, line);
  280. > }
