ssl/record/ssl3_record.c:876: error: MEMORY_LEAK
  memory dynamically allocated by call to `EVP_MD_CTX_new()` at line 855, column 30 is not reachable after line 876, column 13.
Showing all 82 steps of the trace


ssl/record/ssl3_record.c:788:1: start of procedure n_ssl3_mac()
786.   }
787.   
788. > int n_ssl3_mac(SSL *ssl, unsigned char *md, int send)
789.   {
790.       SSL3_RECORD *rec;

ssl/record/ssl3_record.c:798:9: Taking true branch
796.       int t;
797.   
798.       if (send) {
               ^
799.           rec = RECORD_LAYER_get_wrec(&ssl->rlayer);
800.           mac_sec = &(ssl->s3->write_mac_secret[0]);

ssl/record/ssl3_record.c:799:9: 
797.   
798.       if (send) {
799. >         rec = RECORD_LAYER_get_wrec(&ssl->rlayer);
800.           mac_sec = &(ssl->s3->write_mac_secret[0]);
801.           seq = RECORD_LAYER_get_write_sequence(&ssl->rlayer);

ssl/record/ssl3_record.c:800:9: 
798.       if (send) {
799.           rec = RECORD_LAYER_get_wrec(&ssl->rlayer);
800. >         mac_sec = &(ssl->s3->write_mac_secret[0]);
801.           seq = RECORD_LAYER_get_write_sequence(&ssl->rlayer);
802.           hash = ssl->write_hash;

ssl/record/ssl3_record.c:801:9: 
799.           rec = RECORD_LAYER_get_wrec(&ssl->rlayer);
800.           mac_sec = &(ssl->s3->write_mac_secret[0]);
801. >         seq = RECORD_LAYER_get_write_sequence(&ssl->rlayer);
802.           hash = ssl->write_hash;
803.       } else {

ssl/record/ssl3_record.c:802:9: 
800.           mac_sec = &(ssl->s3->write_mac_secret[0]);
801.           seq = RECORD_LAYER_get_write_sequence(&ssl->rlayer);
802. >         hash = ssl->write_hash;
803.       } else {
804.           rec = RECORD_LAYER_get_rrec(&ssl->rlayer);

ssl/record/ssl3_record.c:810:5: 
808.       }
809.   
810. >     t = EVP_MD_CTX_size(hash);
811.       if (t < 0)
812.           return -1;

crypto/evp/evp_lib.c:477:1: start of procedure EVP_MD_CTX_md()
  475.   }
  476.   
  477. > const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx)
  478.   {
  479.       if (!ctx)

crypto/evp/evp_lib.c:479:10: Taking false branch
  477.   const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx)
  478.   {
  479.       if (!ctx)
                  ^
  480.           return NULL;
  481.       return ctx->digest;

crypto/evp/evp_lib.c:481:5: 
  479.       if (!ctx)
  480.           return NULL;
  481. >     return ctx->digest;
  482.   }
  483.   

crypto/evp/evp_lib.c:482:1: return from a call to EVP_MD_CTX_md
  480.           return NULL;
  481.       return ctx->digest;
  482. > }
  483.   
  484.   EVP_PKEY_CTX *EVP_MD_CTX_pkey_ctx(const EVP_MD_CTX *ctx)

crypto/evp/evp_lib.c:339:1: start of procedure EVP_MD_size()
  337.   }
  338.   
  339. > int EVP_MD_size(const EVP_MD *md)
  340.   {
  341.       if (!md) {

crypto/evp/evp_lib.c:341:10: Taking false branch
  339.   int EVP_MD_size(const EVP_MD *md)
  340.   {
  341.       if (!md) {
                  ^
  342.           EVPerr(EVP_F_EVP_MD_SIZE, EVP_R_MESSAGE_DIGEST_IS_NULL);
  343.           return -1;

crypto/evp/evp_lib.c:345:5: 
  343.           return -1;
  344.       }
  345. >     return md->md_size;
  346.   }
  347.   

crypto/evp/evp_lib.c:346:1: return from a call to EVP_MD_size
  344.       }
  345.       return md->md_size;
  346. > }
  347.   
  348.   unsigned long EVP_MD_flags(const EVP_MD *md)

ssl/record/ssl3_record.c:811:9: Taking false branch
809.   
810.       t = EVP_MD_CTX_size(hash);
811.       if (t < 0)
               ^
812.           return -1;
813.       md_size = t;

ssl/record/ssl3_record.c:813:5: 
811.       if (t < 0)
812.           return -1;
813. >     md_size = t;
814.       npad = (48 / md_size) * md_size;
815.   

ssl/record/ssl3_record.c:814:5: 
812.           return -1;
813.       md_size = t;
814. >     npad = (48 / md_size) * md_size;
815.   
816.       if (!send &&

ssl/record/ssl3_record.c:816:10: Taking false branch
814.       npad = (48 / md_size) * md_size;
815.   
816.       if (!send &&
                ^
817.           EVP_CIPHER_CTX_mode(ssl->enc_read_ctx) == EVP_CIPH_CBC_MODE &&
818.           ssl3_cbc_record_digest_supported(hash)) {

ssl/record/ssl3_record.c:855:9: 
853.           unsigned int md_size_u;
854.           /* Chop the digest off the end :-) */
855. >         EVP_MD_CTX *md_ctx = EVP_MD_CTX_new();
856.   
857.           if (md_ctx == NULL)

crypto/evp/digest.c:152:1: start of procedure EVP_MD_CTX_new()
  150.   }
  151.   
  152. > EVP_MD_CTX *EVP_MD_CTX_new(void)
  153.   {
  154.       return OPENSSL_zalloc(sizeof(EVP_MD_CTX));

crypto/evp/digest.c:154:5: 
  152.   EVP_MD_CTX *EVP_MD_CTX_new(void)
  153.   {
  154. >     return OPENSSL_zalloc(sizeof(EVP_MD_CTX));
  155.   }
  156.   

crypto/mem.c:158:1: start of procedure CRYPTO_zalloc()
    156.   }
    157.   
    158. > void *CRYPTO_zalloc(size_t num, const char *file, int line)
    159.   {
    160.       void *ret = CRYPTO_malloc(num, file, line);

crypto/mem.c:160:5: 
    158.   void *CRYPTO_zalloc(size_t num, const char *file, int line)
    159.   {
    160. >     void *ret = CRYPTO_malloc(num, file, line);
    161.   
    162.       if (ret != NULL)

crypto/mem.c:119:1: start of procedure CRYPTO_malloc()
      117.   }
      118.   
      119. > void *CRYPTO_malloc(size_t num, const char *file, int line)
      120.   {
      121.       void *ret = NULL;

crypto/mem.c:121:5: 
      119.   void *CRYPTO_malloc(size_t num, const char *file, int line)
      120.   {
      121. >     void *ret = NULL;
      122.   
      123.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)

crypto/mem.c:123:9: Taking false branch
      121.       void *ret = NULL;
      122.   
      123.       if (malloc_impl != NULL && malloc_impl != CRYPTO_malloc)
                     ^
      124.           return malloc_impl(num, file, line);
      125.   

crypto/mem.c:126:9: Taking false branch
      124.           return malloc_impl(num, file, line);
      125.   
      126.       if (num <= 0)
                     ^
      127.           return NULL;
      128.   

crypto/mem.c:129:5: 
      127.           return NULL;
      128.   
      129. >     allow_customize = 0;
      130.   #ifndef OPENSSL_NO_CRYPTO_MDEBUG
      131.       if (call_malloc_debug) {

crypto/mem.c:139:5: 
      137.       }
      138.   #else
      139. >     osslargused(file); osslargused(line);
      140.       ret = malloc(num);
      141.   #endif

crypto/mem.c:139:24: 
      137.       }
      138.   #else
      139. >     osslargused(file); osslargused(line);
      140.       ret = malloc(num);
      141.   #endif

crypto/mem.c:140:5: 
      138.   #else
      139.       osslargused(file); osslargused(line);
      140. >     ret = malloc(num);
      141.   #endif
      142.   

crypto/mem.c:155:5: 
      153.   #endif
      154.   
      155. >     return ret;
      156.   }
      157.   

crypto/mem.c:156:1: return from a call to CRYPTO_malloc
      154.   
      155.       return ret;
      156. > }
      157.   
      158.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

crypto/mem.c:162:9: Taking true branch
    160.       void *ret = CRYPTO_malloc(num, file, line);
    161.   
    162.       if (ret != NULL)
                   ^
    163.           memset(ret, 0, num);
    164.       return ret;

crypto/mem.c:163:9: 
    161.   
    162.       if (ret != NULL)
    163. >         memset(ret, 0, num);
    164.       return ret;
    165.   }

crypto/mem.c:164:5: 
    162.       if (ret != NULL)
    163.           memset(ret, 0, num);
    164. >     return ret;
    165.   }
    166.   

crypto/mem.c:165:1: return from a call to CRYPTO_zalloc
    163.           memset(ret, 0, num);
    164.       return ret;
    165. > }
    166.   
    167.   void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)

crypto/evp/digest.c:155:1: return from a call to EVP_MD_CTX_new
  153.   {
  154.       return OPENSSL_zalloc(sizeof(EVP_MD_CTX));
  155. > }
  156.   
  157.   void EVP_MD_CTX_free(EVP_MD_CTX *ctx)

ssl/record/ssl3_record.c:857:13: Taking false branch
855.           EVP_MD_CTX *md_ctx = EVP_MD_CTX_new();
856.   
857.           if (md_ctx == NULL)
                   ^
858.               return -1;
859.   

ssl/record/ssl3_record.c:860:9: 
858.               return -1;
859.   
860. >         rec_char = rec->type;
861.           p = md;
862.           s2n(rec->length, p);

ssl/record/ssl3_record.c:861:9: 
859.   
860.           rec_char = rec->type;
861. >         p = md;
862.           s2n(rec->length, p);
863.           if (EVP_MD_CTX_copy_ex(md_ctx, hash) <= 0

ssl/record/ssl3_record.c:862:9: 
860.           rec_char = rec->type;
861.           p = md;
862. >         s2n(rec->length, p);
863.           if (EVP_MD_CTX_copy_ex(md_ctx, hash) <= 0
864.                   || EVP_DigestUpdate(md_ctx, mac_sec, md_size) <= 0

ssl/record/ssl3_record.c:863:13: 
861.           p = md;
862.           s2n(rec->length, p);
863. >         if (EVP_MD_CTX_copy_ex(md_ctx, hash) <= 0
864.                   || EVP_DigestUpdate(md_ctx, mac_sec, md_size) <= 0
865.                   || EVP_DigestUpdate(md_ctx, ssl3_pad_1, npad) <= 0

crypto/evp/digest.c:291:1: start of procedure EVP_MD_CTX_copy_ex()
  289.   }
  290.   
  291. > int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in)
  292.   {
  293.       unsigned char *tmp_buf;

crypto/evp/digest.c:294:10: Taking false branch
  292.   {
  293.       unsigned char *tmp_buf;
  294.       if ((in == NULL) || (in->digest == NULL)) {
                  ^
  295.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, EVP_R_INPUT_NOT_INITIALIZED);
  296.           return 0;

crypto/evp/digest.c:294:26: Taking false branch
  292.   {
  293.       unsigned char *tmp_buf;
  294.       if ((in == NULL) || (in->digest == NULL)) {
                                  ^
  295.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, EVP_R_INPUT_NOT_INITIALIZED);
  296.           return 0;

crypto/evp/digest.c:300:9: Taking true branch
  298.   #ifndef OPENSSL_NO_ENGINE
  299.       /* Make sure it's safe to copy a digest context using an ENGINE */
  300.       if (in->engine && !ENGINE_init(in->engine)) {
                 ^
  301.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_ENGINE_LIB);
  302.           return 0;

crypto/evp/digest.c:300:24: 
  298.   #ifndef OPENSSL_NO_ENGINE
  299.       /* Make sure it's safe to copy a digest context using an ENGINE */
  300. >     if (in->engine && !ENGINE_init(in->engine)) {
  301.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_ENGINE_LIB);
  302.           return 0;

crypto/engine/eng_init.c:121:1: start of procedure ENGINE_init()
    119.   
    120.   /* The API (locked) version of "init" */
    121. > int ENGINE_init(ENGINE *e)
    122.   {
    123.       int ret;

crypto/engine/eng_init.c:124:9: Taking false branch
    122.   {
    123.       int ret;
    124.       if (e == NULL) {
                   ^
    125.           ENGINEerr(ENGINE_F_ENGINE_INIT, ERR_R_PASSED_NULL_PARAMETER);
    126.           return 0;

crypto/engine/eng_init.c:128:5: 
    126.           return 0;
    127.       }
    128. >     CRYPTO_w_lock(CRYPTO_LOCK_ENGINE);
    129.       ret = engine_unlocked_init(e);
    130.       CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE);

crypto/lock.c:414:1: start of procedure CRYPTO_lock()
      412.   }
      413.   
      414. > void CRYPTO_lock(int mode, int type, const char *file, int line)
      415.   {
      416.   #ifdef LOCK_DEBUG

crypto/lock.c:441:9: Taking false branch
      439.       }
      440.   #endif
      441.       if (type < 0) {
                     ^
      442.           if (dynlock_lock_callback != NULL) {
      443.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:452:16: Taking true branch
      450.               CRYPTO_destroy_dynlockid(type);
      451.           }
      452.       } else if (locking_callback != NULL)
                            ^
      453.           locking_callback(mode, type, file, line);
      454.   }

crypto/lock.c:453:9: Skipping __function_pointer__(): unresolved function pointer
      451.           }
      452.       } else if (locking_callback != NULL)
      453.           locking_callback(mode, type, file, line);
                     ^
      454.   }
      455.   

crypto/lock.c:441:5: 
      439.       }
      440.   #endif
      441. >     if (type < 0) {
      442.           if (dynlock_lock_callback != NULL) {
      443.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:454:1: return from a call to CRYPTO_lock
      452.       } else if (locking_callback != NULL)
      453.           locking_callback(mode, type, file, line);
      454. > }
      455.   
      456.   int CRYPTO_add_lock(int *pointer, int amount, int type, const char *file,

crypto/engine/eng_init.c:129:5: 
    127.       }
    128.       CRYPTO_w_lock(CRYPTO_LOCK_ENGINE);
    129. >     ret = engine_unlocked_init(e);
    130.       CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE);
    131.       return ret;

crypto/engine/eng_init.c:61:1: start of procedure engine_unlocked_init()
      59.    * it's already in use). This version is only used internally.
      60.    */
      61. > int engine_unlocked_init(ENGINE *e)
      62.   {
      63.       int to_return = 1;

crypto/engine/eng_init.c:63:5: 
      61.   int engine_unlocked_init(ENGINE *e)
      62.   {
      63. >     int to_return = 1;
      64.   
      65.       if ((e->funct_ref == 0) && e->init)

crypto/engine/eng_init.c:65:10: Taking true branch
      63.       int to_return = 1;
      64.   
      65.       if ((e->funct_ref == 0) && e->init)
                     ^
      66.           /*
      67.            * This is the first functional reference and the engine requires

crypto/engine/eng_init.c:65:32: Taking true branch
      63.       int to_return = 1;
      64.   
      65.       if ((e->funct_ref == 0) && e->init)
                                           ^
      66.           /*
      67.            * This is the first functional reference and the engine requires

crypto/engine/eng_init.c:70:9: Skipping __function_pointer__(): unresolved function pointer
      68.            * initialisation so we do it now.
      69.            */
      70.           to_return = e->init(e);
                    ^
      71.       if (to_return) {
      72.           /*

crypto/engine/eng_init.c:71:9: Taking false branch
      69.            */
      70.           to_return = e->init(e);
      71.       if (to_return) {
                    ^
      72.           /*
      73.            * OK, we return a functional reference which is also a structural

crypto/engine/eng_init.c:81:5: 
      79.           engine_ref_debug(e, 1, 1);
      80.       }
      81. >     return to_return;
      82.   }
      83.   

crypto/engine/eng_init.c:82:1: return from a call to engine_unlocked_init
      80.       }
      81.       return to_return;
      82. > }
      83.   
      84.   /*

crypto/engine/eng_init.c:130:5: 
    128.       CRYPTO_w_lock(CRYPTO_LOCK_ENGINE);
    129.       ret = engine_unlocked_init(e);
    130. >     CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE);
    131.       return ret;
    132.   }

crypto/lock.c:414:1: start of procedure CRYPTO_lock()
      412.   }
      413.   
      414. > void CRYPTO_lock(int mode, int type, const char *file, int line)
      415.   {
      416.   #ifdef LOCK_DEBUG

crypto/lock.c:441:9: Taking false branch
      439.       }
      440.   #endif
      441.       if (type < 0) {
                     ^
      442.           if (dynlock_lock_callback != NULL) {
      443.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:452:16: Taking true branch
      450.               CRYPTO_destroy_dynlockid(type);
      451.           }
      452.       } else if (locking_callback != NULL)
                            ^
      453.           locking_callback(mode, type, file, line);
      454.   }

crypto/lock.c:453:9: Skipping __function_pointer__(): unresolved function pointer
      451.           }
      452.       } else if (locking_callback != NULL)
      453.           locking_callback(mode, type, file, line);
                     ^
      454.   }
      455.   

crypto/lock.c:441:5: 
      439.       }
      440.   #endif
      441. >     if (type < 0) {
      442.           if (dynlock_lock_callback != NULL) {
      443.               struct CRYPTO_dynlock_value *pointer

crypto/lock.c:454:1: return from a call to CRYPTO_lock
      452.       } else if (locking_callback != NULL)
      453.           locking_callback(mode, type, file, line);
      454. > }
      455.   
      456.   int CRYPTO_add_lock(int *pointer, int amount, int type, const char *file,

crypto/engine/eng_init.c:131:5: 
    129.       ret = engine_unlocked_init(e);
    130.       CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE);
    131. >     return ret;
    132.   }
    133.   

crypto/engine/eng_init.c:132:1: return from a call to ENGINE_init
    130.       CRYPTO_w_unlock(CRYPTO_LOCK_ENGINE);
    131.       return ret;
    132. > }
    133.   
    134.   /* The API (locked) version of "finish" */

crypto/evp/digest.c:300:24: Taking true branch
  298.   #ifndef OPENSSL_NO_ENGINE
  299.       /* Make sure it's safe to copy a digest context using an ENGINE */
  300.       if (in->engine && !ENGINE_init(in->engine)) {
                                ^
  301.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_ENGINE_LIB);
  302.           return 0;

crypto/evp/digest.c:301:9: Skipping ERR_put_error(): empty list of specs
  299.       /* Make sure it's safe to copy a digest context using an ENGINE */
  300.       if (in->engine && !ENGINE_init(in->engine)) {
  301.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_ENGINE_LIB);
                 ^
  302.           return 0;
  303.       }

crypto/evp/digest.c:302:9: 
  300.       if (in->engine && !ENGINE_init(in->engine)) {
  301.           EVPerr(EVP_F_EVP_MD_CTX_COPY_EX, ERR_R_ENGINE_LIB);
  302. >         return 0;
  303.       }
  304.   #endif

crypto/evp/digest.c:348:1: return from a call to EVP_MD_CTX_copy_ex
  346.   
  347.       return 1;
  348. > }
  349.   
  350.   int EVP_Digest(const void *data, size_t count,

ssl/record/ssl3_record.c:863:13: Taking true branch
861.           p = md;
862.           s2n(rec->length, p);
863.           if (EVP_MD_CTX_copy_ex(md_ctx, hash) <= 0
                   ^
864.                   || EVP_DigestUpdate(md_ctx, mac_sec, md_size) <= 0
865.                   || EVP_DigestUpdate(md_ctx, ssl3_pad_1, npad) <= 0

ssl/record/ssl3_record.c:876:13: Skipping EVP_MD_CTX_reset(): empty list of specs
874.                   || EVP_DigestUpdate(md_ctx, md, md_size) <= 0
875.                   || EVP_DigestFinal_ex(md_ctx, md, &md_size_u) <= 0) {
876.               EVP_MD_CTX_reset(md_ctx);
                   ^
877.               return -1;
878.           }
