crypto/x509/x509_vfy.c:630: error: NULL_DEREFERENCE
  pointer `x` last assigned on line 620 could be null and is dereferenced at line 630, column 36.
Showing all 24 steps of the trace


crypto/x509/x509_vfy.c:580:1: start of procedure check_chain_extensions()
578.    */
579.   
580. > static int check_chain_extensions(X509_STORE_CTX *ctx)
581.   {
582.       int i, ok = 0, must_be_ca, plen = 0;

crypto/x509/x509_vfy.c:582:5: 
580.   static int check_chain_extensions(X509_STORE_CTX *ctx)
581.   {
582. >     int i, ok = 0, must_be_ca, plen = 0;
583.       X509 *x;
584.       int (*cb) (int xok, X509_STORE_CTX *xctx);

crypto/x509/x509_vfy.c:585:5: 
583.       X509 *x;
584.       int (*cb) (int xok, X509_STORE_CTX *xctx);
585. >     int proxy_path_length = 0;
586.       int purpose;
587.       int allow_proxy_certs;

crypto/x509/x509_vfy.c:588:5: 
586.       int purpose;
587.       int allow_proxy_certs;
588. >     cb = ctx->verify_cb;
589.   
590.       /*-

crypto/x509/x509_vfy.c:599:5: 
597.        *     all certificates in the chain except the leaf certificate.
598.        */
599. >     must_be_ca = -1;
600.   
601.       /* CRL path validation */

crypto/x509/x509_vfy.c:602:9: Taking false branch
600.   
601.       /* CRL path validation */
602.       if (ctx->parent) {
               ^
603.           allow_proxy_certs = 0;
604.           purpose = X509_PURPOSE_CRL_SIGN;

crypto/x509/x509_vfy.c:607:17: Condition is true
605.       } else {
606.           allow_proxy_certs =
607.               ! !(ctx->param->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);
                       ^
608.           /*
609.            * A hack to keep people who don't want to modify their software

crypto/x509/x509_vfy.c:607:13: 
605.       } else {
606.           allow_proxy_certs =
607. >             ! !(ctx->param->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);
608.           /*
609.            * A hack to keep people who don't want to modify their software

crypto/x509/x509_vfy.c:606:9: 
604.           purpose = X509_PURPOSE_CRL_SIGN;
605.       } else {
606. >         allow_proxy_certs =
607.               ! !(ctx->param->flags & X509_V_FLAG_ALLOW_PROXY_CERTS);
608.           /*

crypto/x509/x509_vfy.c:612:13: Taking false branch
610.            * happy
611.            */
612.           if (getenv("OPENSSL_ALLOW_PROXY_CERTS"))
                   ^
613.               allow_proxy_certs = 1;
614.           purpose = ctx->param->purpose;

crypto/x509/x509_vfy.c:614:9: 
612.           if (getenv("OPENSSL_ALLOW_PROXY_CERTS"))
613.               allow_proxy_certs = 1;
614. >         purpose = ctx->param->purpose;
615.       }
616.   

crypto/x509/x509_vfy.c:618:10: 
616.   
617.       /* Check all untrusted certificates */
618. >     for (i = 0; i < ctx->last_untrusted; i++) {
619.           int ret;
620.           x = sk_X509_value(ctx->chain, i);

crypto/x509/x509_vfy.c:618:17: Loop condition is true. Entering loop body
616.   
617.       /* Check all untrusted certificates */
618.       for (i = 0; i < ctx->last_untrusted; i++) {
                       ^
619.           int ret;
620.           x = sk_X509_value(ctx->chain, i);

crypto/x509/x509_vfy.c:620:13: Condition is true
618.       for (i = 0; i < ctx->last_untrusted; i++) {
619.           int ret;
620.           x = sk_X509_value(ctx->chain, i);
                   ^
621.           if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
622.               && (x->ex_flags & EXFLAG_CRITICAL)) {

crypto/x509/x509_vfy.c:620:9: 
618.       for (i = 0; i < ctx->last_untrusted; i++) {
619.           int ret;
620. >         x = sk_X509_value(ctx->chain, i);
621.           if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
622.               && (x->ex_flags & EXFLAG_CRITICAL)) {

crypto/stack/stack.c:328:1: start of procedure sk_value()
  326.   }
  327.   
  328. > void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))

crypto/stack/stack.c:330:10: Taking false branch
  328.   void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
                  ^
  331.           return NULL;
  332.       return st->data[i];

crypto/stack/stack.c:330:17: Taking false branch
  328.   void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
                         ^
  331.           return NULL;
  332.       return st->data[i];

crypto/stack/stack.c:330:28: Taking true branch
  328.   void *sk_value(const _STACK *st, int i)
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
                                    ^
  331.           return NULL;
  332.       return st->data[i];

crypto/stack/stack.c:331:9: 
  329.   {
  330.       if (!st || (i < 0) || (i >= st->num))
  331. >         return NULL;
  332.       return st->data[i];
  333.   }

crypto/stack/stack.c:333:1: return from a call to sk_value
  331.           return NULL;
  332.       return st->data[i];
  333. > }
  334.   
  335.   void *sk_set(_STACK *st, int i, void *value)

crypto/x509/x509_vfy.c:621:15: Taking false branch
619.           int ret;
620.           x = sk_X509_value(ctx->chain, i);
621.           if (!(ctx->param->flags & X509_V_FLAG_IGNORE_CRITICAL)
                     ^
622.               && (x->ex_flags & EXFLAG_CRITICAL)) {
623.               ctx->error = X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION;

crypto/x509/x509_vfy.c:630:14: Taking true branch
628.                   goto end;
629.           }
630.           if (!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY)) {
                    ^
631.               ctx->error = X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED;
632.               ctx->error_depth = i;

crypto/x509/x509_vfy.c:630:36: 
628.                   goto end;
629.           }
630. >         if (!allow_proxy_certs && (x->ex_flags & EXFLAG_PROXY)) {
631.               ctx->error = X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED;
632.               ctx->error_depth = i;
