apps/x509.c:993: error: NULL_DEREFERENCE
  pointer `upkey` last assigned on line 992 could be null and is dereferenced by call to `EVP_PKEY_copy_parameters()` at line 993, column 5.
Showing all 22 steps of the trace


apps/x509.c:980:1: start of procedure x509_certify()
978.   }
979.   
980. > static int x509_certify(X509_STORE *ctx, char *CAfile, const EVP_MD *digest,
981.                           X509 *x, X509 *xca, EVP_PKEY *pkey,
982.                           STACK_OF(OPENSSL_STRING) *sigopts,

apps/x509.c:987:5: 
985.                           ASN1_INTEGER *sno, int reqfile)
986.   {
987. >     int ret = 0;
988.       ASN1_INTEGER *bs = NULL;
989.       X509_STORE_CTX xsc;

apps/x509.c:988:5: 
986.   {
987.       int ret = 0;
988. >     ASN1_INTEGER *bs = NULL;
989.       X509_STORE_CTX xsc;
990.       EVP_PKEY *upkey;

apps/x509.c:992:5: 
990.       EVP_PKEY *upkey;
991.   
992. >     upkey = X509_get0_pubkey(xca);
993.       EVP_PKEY_copy_parameters(upkey, pkey);
994.   

crypto/x509/x509_cmp.c:308:1: start of procedure X509_get0_pubkey()
  306.   }
  307.   
  308. > EVP_PKEY *X509_get0_pubkey(X509 *x)
  309.   {
  310.       if (x == NULL)

crypto/x509/x509_cmp.c:310:9: Taking false branch
  308.   EVP_PKEY *X509_get0_pubkey(X509 *x)
  309.   {
  310.       if (x == NULL)
                 ^
  311.           return NULL;
  312.       return X509_PUBKEY_get0(x->cert_info.key);

crypto/x509/x509_cmp.c:312:5: 
  310.       if (x == NULL)
  311.           return NULL;
  312. >     return X509_PUBKEY_get0(x->cert_info.key);
  313.   }
  314.   

crypto/asn1/x_pubkey.c:124:1: start of procedure X509_PUBKEY_get0()
    122.   }
    123.   
    124. > EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key)
    125.   {
    126.       EVP_PKEY *ret = NULL;

crypto/asn1/x_pubkey.c:126:5: 
    124.   EVP_PKEY *X509_PUBKEY_get0(X509_PUBKEY *key)
    125.   {
    126. >     EVP_PKEY *ret = NULL;
    127.   
    128.       if (key == NULL)

crypto/asn1/x_pubkey.c:128:9: Taking false branch
    126.       EVP_PKEY *ret = NULL;
    127.   
    128.       if (key == NULL)
                   ^
    129.           goto error;
    130.   

crypto/asn1/x_pubkey.c:131:9: Taking false branch
    129.           goto error;
    130.   
    131.       if (key->pkey != NULL)
                   ^
    132.           return key->pkey;
    133.   

crypto/asn1/x_pubkey.c:134:9: Taking true branch
    132.           return key->pkey;
    133.   
    134.       if (key->public_key == NULL)
                   ^
    135.           goto error;
    136.   

crypto/asn1/x_pubkey.c:170:2: 
    168.       return ret;
    169.   
    170. >  error:
    171.       EVP_PKEY_free(ret);
    172.       return (NULL);

crypto/asn1/x_pubkey.c:171:5: 
    169.   
    170.    error:
    171. >     EVP_PKEY_free(ret);
    172.       return (NULL);
    173.   }

crypto/evp/p_lib.c:420:1: start of procedure EVP_PKEY_free()
      418.   }
      419.   
      420. > void EVP_PKEY_free(EVP_PKEY *x)
      421.   {
      422.       int i;

crypto/evp/p_lib.c:424:9: Taking true branch
      422.       int i;
      423.   
      424.       if (x == NULL)
                     ^
      425.           return;
      426.   

crypto/evp/p_lib.c:425:9: 
      423.   
      424.       if (x == NULL)
      425. >         return;
      426.   
      427.       i = CRYPTO_add(&x->references, -1, CRYPTO_LOCK_EVP_PKEY);

crypto/evp/p_lib.c:442:1: return from a call to EVP_PKEY_free
      440.       sk_X509_ATTRIBUTE_pop_free(x->attributes, X509_ATTRIBUTE_free);
      441.       OPENSSL_free(x);
      442. > }
      443.   
      444.   static void EVP_PKEY_free_it(EVP_PKEY *x)

crypto/asn1/x_pubkey.c:172:5: 
    170.    error:
    171.       EVP_PKEY_free(ret);
    172. >     return (NULL);
    173.   }
    174.   

crypto/asn1/x_pubkey.c:173:1: return from a call to X509_PUBKEY_get0
    171.       EVP_PKEY_free(ret);
    172.       return (NULL);
    173. > }
    174.   
    175.   EVP_PKEY *X509_PUBKEY_get(X509_PUBKEY *key)

crypto/x509/x509_cmp.c:313:1: return from a call to X509_get0_pubkey
  311.           return NULL;
  312.       return X509_PUBKEY_get0(x->cert_info.key);
  313. > }
  314.   
  315.   EVP_PKEY *X509_get_pubkey(X509 *x)

apps/x509.c:993:5: 
991.   
992.       upkey = X509_get0_pubkey(xca);
993. >     EVP_PKEY_copy_parameters(upkey, pkey);
994.   
995.       if (!X509_STORE_CTX_init(&xsc, ctx, x, NULL)) {
