ssl/t1_lib.c:3086: error: MEMORY_LEAK
  memory dynamically allocated to `return` by call to `HMAC_CTX_new()` at line 3069, column 12 is not reachable after line 3086, column 13.
Showing all 35 steps of the trace


ssl/t1_lib.c:3053:1: start of procedure tls_decrypt_ticket()
3051.    *    4: same as 3, but the ticket needs to be renewed.
3052.    */
3053. > static int tls_decrypt_ticket(SSL *s, const unsigned char *etick,
3054.                                 int eticklen, const unsigned char *sess_id,
3055.                                 int sesslen, SSL_SESSION **psess)

ssl/t1_lib.c:3060:5: 
3058.       unsigned char *sdec;
3059.       const unsigned char *p;
3060. >     int slen, mlen, renew_ticket = 0;
3061.       unsigned char tick_hmac[EVP_MAX_MD_SIZE];
3062.       HMAC_CTX *hctx = NULL;

ssl/t1_lib.c:3062:5: 
3060.       int slen, mlen, renew_ticket = 0;
3061.       unsigned char tick_hmac[EVP_MAX_MD_SIZE];
3062. >     HMAC_CTX *hctx = NULL;
3063.       EVP_CIPHER_CTX ctx;
3064.       SSL_CTX *tctx = s->initial_ctx;

ssl/t1_lib.c:3064:5: 
3062.       HMAC_CTX *hctx = NULL;
3063.       EVP_CIPHER_CTX ctx;
3064. >     SSL_CTX *tctx = s->initial_ctx;
3065.       /* Need at least keyname + iv + some encrypted data */
3066.       if (eticklen < 48)

ssl/t1_lib.c:3066:9: Taking false branch
3064.       SSL_CTX *tctx = s->initial_ctx;
3065.       /* Need at least keyname + iv + some encrypted data */
3066.       if (eticklen < 48)
                ^
3067.           return 2;
3068.       /* Initialize session ticket encryption and HMAC contexts */

ssl/t1_lib.c:3069:5: 
3067.           return 2;
3068.       /* Initialize session ticket encryption and HMAC contexts */
3069. >     hctx = HMAC_CTX_new();
3070.       if (hctx == NULL)
3071.           return -2;

crypto/hmac/hmac.c:173:1: start of procedure HMAC_CTX_new()
  171.   }
  172.   
  173. > HMAC_CTX *HMAC_CTX_new(void)
  174.   {
  175.       HMAC_CTX *ctx = (HMAC_CTX *)OPENSSL_zalloc(sizeof(HMAC_CTX));

crypto/hmac/hmac.c:175:5: 
  173.   HMAC_CTX *HMAC_CTX_new(void)
  174.   {
  175. >     HMAC_CTX *ctx = (HMAC_CTX *)OPENSSL_zalloc(sizeof(HMAC_CTX));
  176.       if (ctx)
  177.           if (!HMAC_CTX_reset(ctx)) {

crypto/mem.c:157:1: start of procedure CRYPTO_zalloc()
    155.   }
    156.   
    157. > void *CRYPTO_zalloc(size_t num, const char *file, int line)
    158.   {
    159.       void *ret = CRYPTO_malloc(num, file, line);

crypto/mem.c:159:5: 
    157.   void *CRYPTO_zalloc(size_t num, const char *file, int line)
    158.   {
    159. >     void *ret = CRYPTO_malloc(num, file, line);
    160.   
    161.       if (ret != NULL)

crypto/mem.c:120:1: start of procedure CRYPTO_malloc()
      118.   }
      119.   
      120. > void *CRYPTO_malloc(size_t num, const char *file, int line)
      121.   {
      122.       void *ret = NULL;

crypto/mem.c:122:5: 
      120.   void *CRYPTO_malloc(size_t num, const char *file, int line)
      121.   {
      122. >     void *ret = NULL;
      123.   
      124.       if (num <= 0)

crypto/mem.c:124:9: Taking false branch
      122.       void *ret = NULL;
      123.   
      124.       if (num <= 0)
                     ^
      125.           return NULL;
      126.   

crypto/mem.c:127:5: 
      125.           return NULL;
      126.   
      127. >     allow_customize = 0;
      128.   #ifdef CRYPTO_MDEBUG
      129.       if (call_malloc_debug) {

crypto/mem.c:137:5: 
      135.       }
      136.   #else
      137. >     (void)file;
      138.       (void)line;
      139.       ret = malloc(num);

crypto/mem.c:138:5: 
      136.   #else
      137.       (void)file;
      138. >     (void)line;
      139.       ret = malloc(num);
      140.   #endif

crypto/mem.c:139:5: 
      137.       (void)file;
      138.       (void)line;
      139. >     ret = malloc(num);
      140.   #endif
      141.   

crypto/mem.c:154:5: 
      152.   #endif
      153.   
      154. >     return ret;
      155.   }
      156.   

crypto/mem.c:155:1: return from a call to CRYPTO_malloc
      153.   
      154.       return ret;
      155. > }
      156.   
      157.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

crypto/mem.c:161:9: Taking true branch
    159.       void *ret = CRYPTO_malloc(num, file, line);
    160.   
    161.       if (ret != NULL)
                   ^
    162.           memset(ret, 0, num);
    163.       return ret;

crypto/mem.c:162:9: 
    160.   
    161.       if (ret != NULL)
    162. >         memset(ret, 0, num);
    163.       return ret;
    164.   }

crypto/mem.c:163:5: 
    161.       if (ret != NULL)
    162.           memset(ret, 0, num);
    163. >     return ret;
    164.   }
    165.   

crypto/mem.c:164:1: return from a call to CRYPTO_zalloc
    162.           memset(ret, 0, num);
    163.       return ret;
    164. > }
    165.   
    166.   void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)

crypto/hmac/hmac.c:176:9: Taking true branch
  174.   {
  175.       HMAC_CTX *ctx = (HMAC_CTX *)OPENSSL_zalloc(sizeof(HMAC_CTX));
  176.       if (ctx)
                 ^
  177.           if (!HMAC_CTX_reset(ctx)) {
  178.               HMAC_CTX_free(ctx);

crypto/hmac/hmac.c:177:14: Taking false branch
  175.       HMAC_CTX *ctx = (HMAC_CTX *)OPENSSL_zalloc(sizeof(HMAC_CTX));
  176.       if (ctx)
  177.           if (!HMAC_CTX_reset(ctx)) {
                      ^
  178.               HMAC_CTX_free(ctx);
  179.               ctx = NULL;

crypto/hmac/hmac.c:181:5: 
  179.               ctx = NULL;
  180.           }
  181. >     return ctx;
  182.   }
  183.   

crypto/hmac/hmac.c:182:1: return from a call to HMAC_CTX_new
  180.           }
  181.       return ctx;
  182. > }
  183.   
  184.   static void hmac_ctx_cleanup(HMAC_CTX *ctx)

ssl/t1_lib.c:3070:9: Taking false branch
3068.       /* Initialize session ticket encryption and HMAC contexts */
3069.       hctx = HMAC_CTX_new();
3070.       if (hctx == NULL)
                ^
3071.           return -2;
3072.       EVP_CIPHER_CTX_init(&ctx);

ssl/t1_lib.c:3072:5: 
3070.       if (hctx == NULL)
3071.           return -2;
3072. >     EVP_CIPHER_CTX_init(&ctx);
3073.       if (tctx->tlsext_ticket_key_cb) {
3074.           unsigned char *nctick = (unsigned char *)etick;

crypto/evp/evp_enc.c:69:1: start of procedure EVP_CIPHER_CTX_init()
  67.   #include "evp_locl.h"
  68.   
  69. > void EVP_CIPHER_CTX_init(EVP_CIPHER_CTX *ctx)
  70.   {
  71.       memset(ctx, 0, sizeof(*ctx));

crypto/evp/evp_enc.c:71:5: 
  69.   void EVP_CIPHER_CTX_init(EVP_CIPHER_CTX *ctx)
  70.   {
  71. >     memset(ctx, 0, sizeof(*ctx));
  72.   }
  73.   

crypto/evp/evp_enc.c:72:1: return from a call to EVP_CIPHER_CTX_init
  70.   {
  71.       memset(ctx, 0, sizeof(*ctx));
  72. > }
  73.   
  74.   EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void)

ssl/t1_lib.c:3073:9: Taking false branch
3071.           return -2;
3072.       EVP_CIPHER_CTX_init(&ctx);
3073.       if (tctx->tlsext_ticket_key_cb) {
                ^
3074.           unsigned char *nctick = (unsigned char *)etick;
3075.           int rv = tctx->tlsext_ticket_key_cb(s, nctick, nctick + 16,

ssl/t1_lib.c:3085:13: Taking true branch
3083.       } else {
3084.           /* Check key name matches */
3085.           if (memcmp(etick, tctx->tlsext_tick_key_name, 16))
                    ^
3086.               return 2;
3087.           if (HMAC_Init_ex(hctx, tctx->tlsext_tick_hmac_key, 16,

ssl/t1_lib.c:3086:13: 
3084.           /* Check key name matches */
3085.           if (memcmp(etick, tctx->tlsext_tick_key_name, 16))
3086. >             return 2;
3087.           if (HMAC_Init_ex(hctx, tctx->tlsext_tick_hmac_key, 16,
3088.                            EVP_sha256(), NULL) <= 0
