crypto/x509/x509_vfy.c:2117: error: NULL_DEREFERENCE
  pointer `ptmp` last assigned on line 2116 could be null and is dereferenced at line 2117, column 13.
Showing all 34 steps of the trace


crypto/x509/x509_vfy.c:2100:1: start of procedure X509_STORE_CTX_purpose_inherit()
2098.    */
2099.   
2100. > int X509_STORE_CTX_purpose_inherit(X509_STORE_CTX *ctx, int def_purpose,
2101.                                      int purpose, int trust)
2102.   {

crypto/x509/x509_vfy.c:2105:10: Taking false branch
2103.       int idx;
2104.       /* If purpose not set use default */
2105.       if (!purpose)
                 ^
2106.           purpose = def_purpose;
2107.       /* If we have a purpose then check it is valid */

crypto/x509/x509_vfy.c:2108:9: Taking true branch
2106.           purpose = def_purpose;
2107.       /* If we have a purpose then check it is valid */
2108.       if (purpose) {
                ^
2109.           X509_PURPOSE *ptmp;
2110.           idx = X509_PURPOSE_get_by_id(purpose);

crypto/x509/x509_vfy.c:2110:9: 
2108.       if (purpose) {
2109.           X509_PURPOSE *ptmp;
2110. >         idx = X509_PURPOSE_get_by_id(purpose);
2111.           if (idx == -1) {
2112.               X509err(X509_F_X509_STORE_CTX_PURPOSE_INHERIT,

crypto/x509v3/v3_purp.c:134:1: start of procedure X509_PURPOSE_get_by_id()
  132.   }
  133.   
  134. > int X509_PURPOSE_get_by_id(int purpose)
  135.   {
  136.       X509_PURPOSE tmp;

crypto/x509v3/v3_purp.c:138:10: Taking true branch
  136.       X509_PURPOSE tmp;
  137.       int idx;
  138.       if ((purpose >= X509_PURPOSE_MIN) && (purpose <= X509_PURPOSE_MAX))
                  ^
  139.           return purpose - X509_PURPOSE_MIN;
  140.       tmp.purpose = purpose;

crypto/x509v3/v3_purp.c:138:43: Taking false branch
  136.       X509_PURPOSE tmp;
  137.       int idx;
  138.       if ((purpose >= X509_PURPOSE_MIN) && (purpose <= X509_PURPOSE_MAX))
                                                   ^
  139.           return purpose - X509_PURPOSE_MIN;
  140.       tmp.purpose = purpose;

crypto/x509v3/v3_purp.c:140:5: 
  138.       if ((purpose >= X509_PURPOSE_MIN) && (purpose <= X509_PURPOSE_MAX))
  139.           return purpose - X509_PURPOSE_MIN;
  140. >     tmp.purpose = purpose;
  141.       if (!xptable)
  142.           return -1;

crypto/x509v3/v3_purp.c:141:10: Taking false branch
  139.           return purpose - X509_PURPOSE_MIN;
  140.       tmp.purpose = purpose;
  141.       if (!xptable)
                  ^
  142.           return -1;
  143.       idx = sk_X509_PURPOSE_find(xptable, &tmp);

crypto/x509v3/v3_purp.c:143:5: 
  141.       if (!xptable)
  142.           return -1;
  143. >     idx = sk_X509_PURPOSE_find(xptable, &tmp);
  144.       if (idx == -1)
  145.           return -1;

include/openssl/x509v3.h:448:1: start of procedure sk_X509_PURPOSE_find()
    446.   # define X509V3_ADD_SILENT               0x10
    447.   
    448. > DEFINE_STACK_OF(X509_PURPOSE)
    449.   
    450.   DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)

crypto/stack/stack.c:295:1: start of procedure OPENSSL_sk_find()
      293.   }
      294.   
      295. > int OPENSSL_sk_find(OPENSSL_STACK *st, const void *data)
      296.   {
      297.       return internal_find(st, data, OBJ_BSEARCH_FIRST_VALUE_ON_MATCH);

crypto/stack/stack.c:297:5: 
      295.   int OPENSSL_sk_find(OPENSSL_STACK *st, const void *data)
      296.   {
      297. >     return internal_find(st, data, OBJ_BSEARCH_FIRST_VALUE_ON_MATCH);
      298.   }
      299.   

crypto/stack/stack.c:266:1: start of procedure internal_find()
        264.   }
        265.   
        266. > static int internal_find(OPENSSL_STACK *st, const void *data,
        267.                            int ret_val_options)
        268.   {

crypto/stack/stack.c:272:9: Taking false branch
        270.       int i;
        271.   
        272.       if (st == NULL || st->num == 0)
                       ^
        273.           return -1;
        274.   

crypto/stack/stack.c:272:23: Taking false branch
        270.       int i;
        271.   
        272.       if (st == NULL || st->num == 0)
                                     ^
        273.           return -1;
        274.   

crypto/stack/stack.c:275:9: Taking true branch
        273.           return -1;
        274.   
        275.       if (st->comp == NULL) {
                       ^
        276.           for (i = 0; i < st->num; i++)
        277.               if (st->data[i] == data)

crypto/stack/stack.c:276:14: 
        274.   
        275.       if (st->comp == NULL) {
        276. >         for (i = 0; i < st->num; i++)
        277.               if (st->data[i] == data)
        278.                   return i;

crypto/stack/stack.c:276:21: Loop condition is true. Entering loop body
        274.   
        275.       if (st->comp == NULL) {
        276.           for (i = 0; i < st->num; i++)
                                   ^
        277.               if (st->data[i] == data)
        278.                   return i;

crypto/stack/stack.c:277:17: Taking true branch
        275.       if (st->comp == NULL) {
        276.           for (i = 0; i < st->num; i++)
        277.               if (st->data[i] == data)
                               ^
        278.                   return i;
        279.           return -1;

crypto/stack/stack.c:278:17: 
        276.           for (i = 0; i < st->num; i++)
        277.               if (st->data[i] == data)
        278. >                 return i;
        279.           return -1;
        280.       }

crypto/stack/stack.c:293:1: return from a call to internal_find
        291.   
        292.       return r == NULL ? -1 : (int)((const void **)r - st->data);
        293. > }
        294.   
        295.   int OPENSSL_sk_find(OPENSSL_STACK *st, const void *data)

crypto/stack/stack.c:298:1: return from a call to OPENSSL_sk_find
      296.   {
      297.       return internal_find(st, data, OBJ_BSEARCH_FIRST_VALUE_ON_MATCH);
      298. > }
      299.   
      300.   int OPENSSL_sk_find_ex(OPENSSL_STACK *st, const void *data)

include/openssl/x509v3.h:448:1: return from a call to sk_X509_PURPOSE_find
    446.   # define X509V3_ADD_SILENT               0x10
    447.   
    448. > DEFINE_STACK_OF(X509_PURPOSE)
    449.   
    450.   DECLARE_ASN1_FUNCTIONS(BASIC_CONSTRAINTS)

crypto/x509v3/v3_purp.c:144:9: Taking false branch
  142.           return -1;
  143.       idx = sk_X509_PURPOSE_find(xptable, &tmp);
  144.       if (idx == -1)
                 ^
  145.           return -1;
  146.       return idx + X509_PURPOSE_COUNT;

crypto/x509v3/v3_purp.c:146:5: 
  144.       if (idx == -1)
  145.           return -1;
  146. >     return idx + X509_PURPOSE_COUNT;
  147.   }
  148.   

crypto/x509v3/v3_purp.c:147:1: return from a call to X509_PURPOSE_get_by_id
  145.           return -1;
  146.       return idx + X509_PURPOSE_COUNT;
  147. > }
  148.   
  149.   int X509_PURPOSE_add(int id, int trust, int flags,

crypto/x509/x509_vfy.c:2111:13: Taking false branch
2109.           X509_PURPOSE *ptmp;
2110.           idx = X509_PURPOSE_get_by_id(purpose);
2111.           if (idx == -1) {
                    ^
2112.               X509err(X509_F_X509_STORE_CTX_PURPOSE_INHERIT,
2113.                       X509_R_UNKNOWN_PURPOSE_ID);

crypto/x509/x509_vfy.c:2116:9: 
2114.               return 0;
2115.           }
2116. >         ptmp = X509_PURPOSE_get0(idx);
2117.           if (ptmp->trust == X509_TRUST_DEFAULT) {
2118.               idx = X509_PURPOSE_get_by_id(def_purpose);

crypto/x509v3/v3_purp.c:113:1: start of procedure X509_PURPOSE_get0()
  111.   }
  112.   
  113. > X509_PURPOSE *X509_PURPOSE_get0(int idx)
  114.   {
  115.       if (idx < 0)

crypto/x509v3/v3_purp.c:115:9: Taking true branch
  113.   X509_PURPOSE *X509_PURPOSE_get0(int idx)
  114.   {
  115.       if (idx < 0)
                 ^
  116.           return NULL;
  117.       if (idx < (int)X509_PURPOSE_COUNT)

crypto/x509v3/v3_purp.c:116:9: 
  114.   {
  115.       if (idx < 0)
  116. >         return NULL;
  117.       if (idx < (int)X509_PURPOSE_COUNT)
  118.           return xstandard + idx;

crypto/x509v3/v3_purp.c:120:1: return from a call to X509_PURPOSE_get0
  118.           return xstandard + idx;
  119.       return sk_X509_PURPOSE_value(xptable, idx - X509_PURPOSE_COUNT);
  120. > }
  121.   
  122.   int X509_PURPOSE_get_by_sname(const char *sname)

crypto/x509/x509_vfy.c:2117:13: 
2115.           }
2116.           ptmp = X509_PURPOSE_get0(idx);
2117. >         if (ptmp->trust == X509_TRUST_DEFAULT) {
2118.               idx = X509_PURPOSE_get_by_id(def_purpose);
2119.               /*
