crypto/err/err.c:757: error: NULL_DEREFERENCE
  pointer `es` last assigned on line 755 could be null and is dereferenced at line 757, column 12.
Showing all 14 steps of the trace


crypto/err/err.c:751:1: start of procedure ERR_pop_to_mark()
749.   }
750.   
751. > int ERR_pop_to_mark(void)
752.   {
753.       ERR_STATE *es;

crypto/err/err.c:755:5: 
753.       ERR_STATE *es;
754.   
755. >     es = ERR_get_state();
756.   
757.       while (es->bottom != es->top

crypto/err/err.c:642:1: start of procedure ERR_get_state()
  640.   }
  641.   
  642. > ERR_STATE *ERR_get_state(void)
  643.   {
  644.       ERR_STATE *state = NULL;

crypto/err/err.c:644:5: 
  642.   ERR_STATE *ERR_get_state(void)
  643.   {
  644. >     ERR_STATE *state = NULL;
  645.   
  646.       if (!RUN_ONCE(&err_init, err_do_init))

crypto/err/err.c:646:10: 
  644.       ERR_STATE *state = NULL;
  645.   
  646. >     if (!RUN_ONCE(&err_init, err_do_init))
  647.           return NULL;
  648.   

crypto/threads_pthread.c:63:1: start of procedure CRYPTO_THREAD_run_once()
    61.   }
    62.   
    63. > int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
    64.   {
    65.       if (pthread_once(once, init) != 0)

crypto/threads_pthread.c:65:9: Taking true branch
    63.   int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
    64.   {
    65.       if (pthread_once(once, init) != 0)
                  ^
    66.           return 0;
    67.   

crypto/threads_pthread.c:66:9: 
    64.   {
    65.       if (pthread_once(once, init) != 0)
    66. >         return 0;
    67.   
    68.       return 1;

crypto/threads_pthread.c:69:1: return from a call to CRYPTO_THREAD_run_once
    67.   
    68.       return 1;
    69. > }
    70.   
    71.   int CRYPTO_THREAD_init_local(CRYPTO_THREAD_LOCAL *key, void (*cleanup)(void *))

crypto/err/err.c:646:10: Condition is false
  644.       ERR_STATE *state = NULL;
  645.   
  646.       if (!RUN_ONCE(&err_init, err_do_init))
                  ^
  647.           return NULL;
  648.   

crypto/err/err.c:646:10: Taking true branch
  644.       ERR_STATE *state = NULL;
  645.   
  646.       if (!RUN_ONCE(&err_init, err_do_init))
                  ^
  647.           return NULL;
  648.   

crypto/err/err.c:647:9: 
  645.   
  646.       if (!RUN_ONCE(&err_init, err_do_init))
  647. >         return NULL;
  648.   
  649.       state = CRYPTO_THREAD_get_local(&err_thread_local);

crypto/err/err.c:667:1: return from a call to ERR_get_state
  665.   
  666.       return state;
  667. > }
  668.   
  669.   int ERR_get_next_error_library(void)

crypto/err/err.c:757:12: 
755.       es = ERR_get_state();
756.   
757. >     while (es->bottom != es->top
758.              && (es->err_flags[es->top] & ERR_FLAG_MARK) == 0) {
759.           err_clear(es, es->top);
