crypto/dh/dh_check.c:162: error: MEMORY_LEAK
  memory dynamically allocated by call to `BN_new()` at line 149, column 9 is not reachable after line 162, column 5.
Showing all 56 steps of the trace


crypto/dh/dh_check.c:143:1: start of procedure DH_check_pub_key()
141.   }
142.   
143. > int DH_check_pub_key(const DH *dh, const BIGNUM *pub_key, int *ret)
144.   {
145.       int ok = 0;

crypto/dh/dh_check.c:145:5: 
143.   int DH_check_pub_key(const DH *dh, const BIGNUM *pub_key, int *ret)
144.   {
145. >     int ok = 0;
146.       BIGNUM *q = NULL;
147.   

crypto/dh/dh_check.c:146:5: 
144.   {
145.       int ok = 0;
146. >     BIGNUM *q = NULL;
147.   
148.       *ret = 0;

crypto/dh/dh_check.c:148:5: 
146.       BIGNUM *q = NULL;
147.   
148. >     *ret = 0;
149.       q = BN_new();
150.       if (q == NULL)

crypto/dh/dh_check.c:149:5: 
147.   
148.       *ret = 0;
149. >     q = BN_new();
150.       if (q == NULL)
151.           goto err;

crypto/bn/bn_lib.c:277:1: start of procedure BN_new()
  275.   }
  276.   
  277. > BIGNUM *BN_new(void)
  278.   {
  279.       BIGNUM *ret;

crypto/bn/bn_lib.c:281:9: 
  279.       BIGNUM *ret;
  280.   
  281. >     if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
  282.           BNerr(BN_F_BN_NEW, ERR_R_MALLOC_FAILURE);
  283.           return (NULL);

crypto/mem.c:157:1: start of procedure CRYPTO_zalloc()
    155.   }
    156.   
    157. > void *CRYPTO_zalloc(size_t num, const char *file, int line)
    158.   {
    159.       void *ret = CRYPTO_malloc(num, file, line);

crypto/mem.c:159:5: 
    157.   void *CRYPTO_zalloc(size_t num, const char *file, int line)
    158.   {
    159. >     void *ret = CRYPTO_malloc(num, file, line);
    160.   
    161.       if (ret != NULL)

crypto/mem.c:120:1: start of procedure CRYPTO_malloc()
      118.   }
      119.   
      120. > void *CRYPTO_malloc(size_t num, const char *file, int line)
      121.   {
      122.       void *ret = NULL;

crypto/mem.c:122:5: 
      120.   void *CRYPTO_malloc(size_t num, const char *file, int line)
      121.   {
      122. >     void *ret = NULL;
      123.   
      124.       if (num <= 0)

crypto/mem.c:124:9: Taking false branch
      122.       void *ret = NULL;
      123.   
      124.       if (num <= 0)
                     ^
      125.           return NULL;
      126.   

crypto/mem.c:127:5: 
      125.           return NULL;
      126.   
      127. >     allow_customize = 0;
      128.   #ifdef CRYPTO_MDEBUG
      129.       if (call_malloc_debug) {

crypto/mem.c:137:5: 
      135.       }
      136.   #else
      137. >     (void)file;
      138.       (void)line;
      139.       ret = malloc(num);

crypto/mem.c:138:5: 
      136.   #else
      137.       (void)file;
      138. >     (void)line;
      139.       ret = malloc(num);
      140.   #endif

crypto/mem.c:139:5: 
      137.       (void)file;
      138.       (void)line;
      139. >     ret = malloc(num);
      140.   #endif
      141.   

crypto/mem.c:154:5: 
      152.   #endif
      153.   
      154. >     return ret;
      155.   }
      156.   

crypto/mem.c:155:1: return from a call to CRYPTO_malloc
      153.   
      154.       return ret;
      155. > }
      156.   
      157.   void *CRYPTO_zalloc(size_t num, const char *file, int line)

crypto/mem.c:161:9: Taking true branch
    159.       void *ret = CRYPTO_malloc(num, file, line);
    160.   
    161.       if (ret != NULL)
                   ^
    162.           memset(ret, 0, num);
    163.       return ret;

crypto/mem.c:162:9: 
    160.   
    161.       if (ret != NULL)
    162. >         memset(ret, 0, num);
    163.       return ret;
    164.   }

crypto/mem.c:163:5: 
    161.       if (ret != NULL)
    162.           memset(ret, 0, num);
    163. >     return ret;
    164.   }
    165.   

crypto/mem.c:164:1: return from a call to CRYPTO_zalloc
    162.           memset(ret, 0, num);
    163.       return ret;
    164. > }
    165.   
    166.   void *CRYPTO_realloc(void *str, size_t num, const char *file, int line)

crypto/bn/bn_lib.c:281:9: Taking false branch
  279.       BIGNUM *ret;
  280.   
  281.       if ((ret = OPENSSL_zalloc(sizeof(*ret))) == NULL) {
                 ^
  282.           BNerr(BN_F_BN_NEW, ERR_R_MALLOC_FAILURE);
  283.           return (NULL);

crypto/bn/bn_lib.c:285:5: 
  283.           return (NULL);
  284.       }
  285. >     ret->flags = BN_FLG_MALLOCED;
  286.       bn_check_top(ret);
  287.       return (ret);

crypto/bn/bn_lib.c:287:5: 
  285.       ret->flags = BN_FLG_MALLOCED;
  286.       bn_check_top(ret);
  287. >     return (ret);
  288.   }
  289.   

crypto/bn/bn_lib.c:288:1: return from a call to BN_new
  286.       bn_check_top(ret);
  287.       return (ret);
  288. > }
  289.   
  290.    BIGNUM *BN_secure_new(void)

crypto/dh/dh_check.c:150:9: Taking false branch
148.       *ret = 0;
149.       q = BN_new();
150.       if (q == NULL)
               ^
151.           goto err;
152.       BN_set_word(q, 1);

crypto/dh/dh_check.c:152:5: 
150.       if (q == NULL)
151.           goto err;
152. >     BN_set_word(q, 1);
153.       if (BN_cmp(pub_key, q) <= 0)
154.           *ret |= DH_CHECK_PUBKEY_TOO_SMALL;

crypto/bn/bn_lib.c:530:1: start of procedure BN_set_word()
  528.   }
  529.   
  530. > int BN_set_word(BIGNUM *a, BN_ULONG w)
  531.   {
  532.       bn_check_top(a);

crypto/bn/bn_lib.c:533:9: Condition is true
  531.   {
  532.       bn_check_top(a);
  533.       if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
                 ^
  534.           return (0);
  535.       a->neg = 0;

crypto/bn/bn_lib.c:533:9: Taking false branch
  531.   {
  532.       bn_check_top(a);
  533.       if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
                 ^
  534.           return (0);
  535.       a->neg = 0;

crypto/bn/bn_lib.c:535:5: 
  533.       if (bn_expand(a, (int)sizeof(BN_ULONG) * 8) == NULL)
  534.           return (0);
  535. >     a->neg = 0;
  536.       a->d[0] = w;
  537.       a->top = (w ? 1 : 0);

crypto/bn/bn_lib.c:536:5: 
  534.           return (0);
  535.       a->neg = 0;
  536. >     a->d[0] = w;
  537.       a->top = (w ? 1 : 0);
  538.       bn_check_top(a);

crypto/bn/bn_lib.c:537:15: Condition is true
  535.       a->neg = 0;
  536.       a->d[0] = w;
  537.       a->top = (w ? 1 : 0);
                       ^
  538.       bn_check_top(a);
  539.       return (1);

crypto/bn/bn_lib.c:537:5: 
  535.       a->neg = 0;
  536.       a->d[0] = w;
  537. >     a->top = (w ? 1 : 0);
  538.       bn_check_top(a);
  539.       return (1);

crypto/bn/bn_lib.c:539:5: 
  537.       a->top = (w ? 1 : 0);
  538.       bn_check_top(a);
  539. >     return (1);
  540.   }
  541.   

crypto/bn/bn_lib.c:540:1: return from a call to BN_set_word
  538.       bn_check_top(a);
  539.       return (1);
  540. > }
  541.   
  542.   BIGNUM *BN_bin2bn(const unsigned char *s, int len, BIGNUM *ret)

crypto/dh/dh_check.c:153:9: Taking false branch
151.           goto err;
152.       BN_set_word(q, 1);
153.       if (BN_cmp(pub_key, q) <= 0)
               ^
154.           *ret |= DH_CHECK_PUBKEY_TOO_SMALL;
155.       BN_copy(q, dh->p);

crypto/dh/dh_check.c:155:5: Skipping BN_copy(): empty list of specs
153.       if (BN_cmp(pub_key, q) <= 0)
154.           *ret |= DH_CHECK_PUBKEY_TOO_SMALL;
155.       BN_copy(q, dh->p);
           ^
156.       BN_sub_word(q, 1);
157.       if (BN_cmp(pub_key, q) >= 0)

crypto/dh/dh_check.c:156:5: Skipping BN_sub_word(): empty list of specs
154.           *ret |= DH_CHECK_PUBKEY_TOO_SMALL;
155.       BN_copy(q, dh->p);
156.       BN_sub_word(q, 1);
           ^
157.       if (BN_cmp(pub_key, q) >= 0)
158.           *ret |= DH_CHECK_PUBKEY_TOO_LARGE;

crypto/dh/dh_check.c:157:9: Taking false branch
155.       BN_copy(q, dh->p);
156.       BN_sub_word(q, 1);
157.       if (BN_cmp(pub_key, q) >= 0)
               ^
158.           *ret |= DH_CHECK_PUBKEY_TOO_LARGE;
159.   

crypto/dh/dh_check.c:160:5: 
158.           *ret |= DH_CHECK_PUBKEY_TOO_LARGE;
159.   
160. >     ok = 1;
161.    err:
162.       BN_free(q);

crypto/dh/dh_check.c:161:2: 
159.   
160.       ok = 1;
161. >  err:
162.       BN_free(q);
163.       return (ok);

crypto/dh/dh_check.c:162:5: 
160.       ok = 1;
161.    err:
162. >     BN_free(q);
163.       return (ok);
164.   }

crypto/bn/bn_lib.c:252:1: start of procedure BN_free()
  250.   }
  251.   
  252. > void BN_free(BIGNUM *a)
  253.   {
  254.       if (a == NULL)

crypto/bn/bn_lib.c:254:9: Taking false branch
  252.   void BN_free(BIGNUM *a)
  253.   {
  254.       if (a == NULL)
                 ^
  255.           return;
  256.       bn_check_top(a);

crypto/bn/bn_lib.c:257:10: 
  255.           return;
  256.       bn_check_top(a);
  257. >     if (!BN_get_flags(a, BN_FLG_STATIC_DATA))
  258.           bn_free_d(a);
  259.       if (a->flags & BN_FLG_MALLOCED)

crypto/bn/bn_lib.c:965:1: start of procedure BN_get_flags()
    963.   }
    964.   
    965. > int BN_get_flags(const BIGNUM *b, int n)
    966.   {
    967.       return b->flags & n;

crypto/bn/bn_lib.c:967:5: 
    965.   int BN_get_flags(const BIGNUM *b, int n)
    966.   {
    967. >     return b->flags & n;
    968.   }
    969.   

crypto/bn/bn_lib.c:968:1: return from a call to BN_get_flags
    966.   {
    967.       return b->flags & n;
    968. > }
    969.   
    970.   /* Populate a BN_GENCB structure with an "old"-style callback */

crypto/bn/bn_lib.c:257:10: Taking false branch
  255.           return;
  256.       bn_check_top(a);
  257.       if (!BN_get_flags(a, BN_FLG_STATIC_DATA))
                  ^
  258.           bn_free_d(a);
  259.       if (a->flags & BN_FLG_MALLOCED)

crypto/bn/bn_lib.c:259:9: Taking false branch
  257.       if (!BN_get_flags(a, BN_FLG_STATIC_DATA))
  258.           bn_free_d(a);
  259.       if (a->flags & BN_FLG_MALLOCED)
                 ^
  260.           OPENSSL_free(a);
  261.       else {

crypto/bn/bn_lib.c:263:9: 
  261.       else {
  262.   #if OPENSSL_API_COMPAT < 0x00908000L
  263. >         a->flags |= BN_FLG_FREE;
  264.   #endif
  265.           a->d = NULL;

crypto/bn/bn_lib.c:265:9: 
  263.           a->flags |= BN_FLG_FREE;
  264.   #endif
  265. >         a->d = NULL;
  266.       }
  267.   }

crypto/bn/bn_lib.c:259:5: 
  257.       if (!BN_get_flags(a, BN_FLG_STATIC_DATA))
  258.           bn_free_d(a);
  259. >     if (a->flags & BN_FLG_MALLOCED)
  260.           OPENSSL_free(a);
  261.       else {

crypto/bn/bn_lib.c:267:1: return from a call to BN_free
  265.           a->d = NULL;
  266.       }
  267. > }
  268.   
  269.   void bn_init(BIGNUM *a)
