crypto/err/err.c:758: error: NULL_DEREFERENCE
  pointer `es` last assigned on line 756 could be null and is dereferenced at line 758, column 12.
Showing all 14 steps of the trace


crypto/err/err.c:752:1: start of procedure ERR_pop_to_mark()
750.   }
751.   
752. > int ERR_pop_to_mark(void)
753.   {
754.       ERR_STATE *es;

crypto/err/err.c:756:5: 
754.       ERR_STATE *es;
755.   
756. >     es = ERR_get_state();
757.   
758.       while (es->bottom != es->top

crypto/err/err.c:643:1: start of procedure ERR_get_state()
  641.   }
  642.   
  643. > ERR_STATE *ERR_get_state(void)
  644.   {
  645.       ERR_STATE *state = NULL;

crypto/err/err.c:645:5: 
  643.   ERR_STATE *ERR_get_state(void)
  644.   {
  645. >     ERR_STATE *state = NULL;
  646.   
  647.       if (!RUN_ONCE(&err_init, err_do_init))

crypto/err/err.c:647:10: 
  645.       ERR_STATE *state = NULL;
  646.   
  647. >     if (!RUN_ONCE(&err_init, err_do_init))
  648.           return NULL;
  649.   

crypto/threads_pthread.c:63:1: start of procedure CRYPTO_THREAD_run_once()
    61.   }
    62.   
    63. > int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
    64.   {
    65.       if (pthread_once(once, init) != 0)

crypto/threads_pthread.c:65:9: Taking true branch
    63.   int CRYPTO_THREAD_run_once(CRYPTO_ONCE *once, void (*init)(void))
    64.   {
    65.       if (pthread_once(once, init) != 0)
                  ^
    66.           return 0;
    67.   

crypto/threads_pthread.c:66:9: 
    64.   {
    65.       if (pthread_once(once, init) != 0)
    66. >         return 0;
    67.   
    68.       return 1;

crypto/threads_pthread.c:69:1: return from a call to CRYPTO_THREAD_run_once
    67.   
    68.       return 1;
    69. > }
    70.   
    71.   int CRYPTO_THREAD_init_local(CRYPTO_THREAD_LOCAL *key, void (*cleanup)(void *))

crypto/err/err.c:647:10: Condition is false
  645.       ERR_STATE *state = NULL;
  646.   
  647.       if (!RUN_ONCE(&err_init, err_do_init))
                  ^
  648.           return NULL;
  649.   

crypto/err/err.c:647:10: Taking true branch
  645.       ERR_STATE *state = NULL;
  646.   
  647.       if (!RUN_ONCE(&err_init, err_do_init))
                  ^
  648.           return NULL;
  649.   

crypto/err/err.c:648:9: 
  646.   
  647.       if (!RUN_ONCE(&err_init, err_do_init))
  648. >         return NULL;
  649.   
  650.       state = CRYPTO_THREAD_get_local(&err_thread_local);

crypto/err/err.c:668:1: return from a call to ERR_get_state
  666.   
  667.       return state;
  668. > }
  669.   
  670.   int ERR_get_next_error_library(void)

crypto/err/err.c:758:12: 
756.       es = ERR_get_state();
757.   
758. >     while (es->bottom != es->top
759.              && (es->err_flags[es->top] & ERR_FLAG_MARK) == 0) {
760.           err_clear(es, es->top);
