apps/x509.c:1160: error: NULL_DEREFERENCE
  pointer `upkey` last assigned on line 1159 could be null and is dereferenced by call to `EVP_PKEY_copy_parameters()` at line 1160, column 2.
Showing all 19 steps of the trace


apps/x509.c:1147:1: start of procedure x509_certify()
1145.   	}
1146.   
1147. > static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
1148.   	     		X509 *x, X509 *xca, EVP_PKEY *pkey,
1149.   			STACK_OF(OPENSSL_STRING) *sigopts,

apps/x509.c:1154:2: 
1152.   			ASN1_INTEGER *sno)
1153.   	{
1154. > 	int ret=0;
1155.   	ASN1_INTEGER *bs=NULL;
1156.   	X509_STORE_CTX xsc;

apps/x509.c:1155:2: 
1153.   	{
1154.   	int ret=0;
1155. > 	ASN1_INTEGER *bs=NULL;
1156.   	X509_STORE_CTX xsc;
1157.   	EVP_PKEY *upkey;

apps/x509.c:1159:2: 
1157.   	EVP_PKEY *upkey;
1158.   
1159. > 	upkey = X509_get_pubkey(xca);
1160.   	EVP_PKEY_copy_parameters(upkey,pkey);
1161.   	EVP_PKEY_free(upkey);

crypto/x509/x509_cmp.c:295:1: start of procedure X509_get_pubkey()
  293.   	}
  294.   
  295. > EVP_PKEY *X509_get_pubkey(X509 *x)
  296.   	{
  297.   	if ((x == NULL) || (x->cert_info == NULL))

crypto/x509/x509_cmp.c:297:7: Taking false branch
  295.   EVP_PKEY *X509_get_pubkey(X509 *x)
  296.   	{
  297.   	if ((x == NULL) || (x->cert_info == NULL))
               ^
  298.   		return(NULL);
  299.   	return(X509_PUBKEY_get(x->cert_info->key));

crypto/x509/x509_cmp.c:297:22: Taking false branch
  295.   EVP_PKEY *X509_get_pubkey(X509 *x)
  296.   	{
  297.   	if ((x == NULL) || (x->cert_info == NULL))
                              ^
  298.   		return(NULL);
  299.   	return(X509_PUBKEY_get(x->cert_info->key));

crypto/x509/x509_cmp.c:299:2: 
  297.   	if ((x == NULL) || (x->cert_info == NULL))
  298.   		return(NULL);
  299. > 	return(X509_PUBKEY_get(x->cert_info->key));
  300.   	}
  301.   

crypto/asn1/x_pubkey.c:133:1: start of procedure X509_PUBKEY_get()
    131.   	}
    132.   
    133. > EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key)
    134.   	{
    135.   	EVP_PKEY *ret=NULL;

crypto/asn1/x_pubkey.c:135:2: 
    133.   EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key)
    134.   	{
    135. > 	EVP_PKEY *ret=NULL;
    136.   
    137.   	if (key == NULL) goto error;

crypto/asn1/x_pubkey.c:137:6: Taking false branch
    135.   	EVP_PKEY *ret=NULL;
    136.   
    137.   	if (key == NULL) goto error;
                ^
    138.   
    139.   	if (key->pkey != NULL)

crypto/asn1/x_pubkey.c:139:6: Taking false branch
    137.   	if (key == NULL) goto error;
    138.   
    139.   	if (key->pkey != NULL)
                ^
    140.   		{
    141.   		CRYPTO_add(&key->pkey->references, 1, CRYPTO_LOCK_EVP_PKEY);

crypto/asn1/x_pubkey.c:145:6: Taking true branch
    143.   		}
    144.   
    145.   	if (key->public_key == NULL) goto error;
                ^
    146.   
    147.   	if ((ret = EVP_PKEY_new()) == NULL)

crypto/asn1/x_pubkey.c:179:2: 
    177.   	return ret;
    178.   
    179. > 	error:
    180.   	if (ret != NULL)
    181.   		EVP_PKEY_free(ret);

crypto/asn1/x_pubkey.c:180:6: Taking false branch
    178.   
    179.   	error:
    180.   	if (ret != NULL)
                ^
    181.   		EVP_PKEY_free(ret);
    182.   	return(NULL);

crypto/asn1/x_pubkey.c:182:2: 
    180.   	if (ret != NULL)
    181.   		EVP_PKEY_free(ret);
    182. > 	return(NULL);
    183.   	}
    184.   

crypto/asn1/x_pubkey.c:183:2: return from a call to X509_PUBKEY_get
    181.   		EVP_PKEY_free(ret);
    182.   	return(NULL);
    183.   	}
            ^
    184.   
    185.   /* Now two pseudo ASN1 routines that take an EVP_PKEY structure

crypto/x509/x509_cmp.c:300:2: return from a call to X509_get_pubkey
  298.   		return(NULL);
  299.   	return(X509_PUBKEY_get(x->cert_info->key));
  300.   	}
          ^
  301.   
  302.   ASN1_BIT_STRING *X509_get0_pubkey_bitstr(const X509 *x)

apps/x509.c:1160:2: 
1158.   
1159.   	upkey = X509_get_pubkey(xca);
1160. > 	EVP_PKEY_copy_parameters(upkey,pkey);
1161.   	EVP_PKEY_free(upkey);
1162.   
