free NULL cleanup

Start ensuring all OpenSSL "free" routines allow NULL, and remove
any if check before calling them.
This gets ASN1_OBJECT_free and ASN1_STRING_free.

Reviewed-by: Matt Caswell <matt@openssl.org>

diff --git a/CHANGES b/CHANGES
index 5dd7d8d81bf4586bbf3d45fb57d8e90c1dd69629..ab5b48250c007b6597c8bc8015fba40fd7a4c0e8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -71,6 +71,11 @@
         Remove all but one '#ifdef undef' which is to be looked at.
      [Rich Salz]
 
         Remove all but one '#ifdef undef' which is to be looked at.
      [Rich Salz]
 

+  *) Clean up calling of xxx_free routines.
+        Just like free(), fix most of the xxx_free routines to accept
+        NULL.  Remove the non-null checks from callers.  Save much code.
+     [Rich Salz]
+

   *) Experimental support for a new, fast, unbiased prime candidate generator,
      bn_probable_prime_dh_coprime(). Not currently used by any prime generator.
      [Felix Laurie von Massenbach <felix@erbridge.co.uk>]
   *) Experimental support for a new, fast, unbiased prime candidate generator,
      bn_probable_prime_dh_coprime(). Not currently used by any prime generator.
      [Felix Laurie von Massenbach <felix@erbridge.co.uk>]

diff --git a/apps/cms.c b/apps/cms.c
index d983e28de9146f88e3064994b4f7e690de673bb8..08774269247e7660c63c2a0685b4fb9fd9123d79 100644 (file)
--- a/apps/cms.c
+++ b/apps/cms.c
@@ -1152,8 +1152,7 @@ int MAIN(int argc, char **argv)
         OPENSSL_free(secret_keyid);
     if (pwri_tmp)
         OPENSSL_free(pwri_tmp);
         OPENSSL_free(secret_keyid);
     if (pwri_tmp)
         OPENSSL_free(pwri_tmp);

-    if (econtent_type)
-        ASN1_OBJECT_free(econtent_type);
+    ASN1_OBJECT_free(econtent_type);

     if (rr)
         CMS_ReceiptRequest_free(rr);
     if (rr_to)
     if (rr)
         CMS_ReceiptRequest_free(rr);
     if (rr_to)

diff --git a/crypto/asn1/a_bitstr.c b/crypto/asn1/a_bitstr.c
index 5a5cc23cb13fd5f6f74f9c823bcfc249dba21d67..4078be4c4b1cf142a6f550b802f481873af4c4a7 100644 (file)
--- a/crypto/asn1/a_bitstr.c
+++ b/crypto/asn1/a_bitstr.c
@@ -177,7 +177,7 @@ ASN1_BIT_STRING *c2i_ASN1_BIT_STRING(ASN1_BIT_STRING **a,
     return (ret);
  err:
     ASN1err(ASN1_F_C2I_ASN1_BIT_STRING, i);
     return (ret);
  err:
     ASN1err(ASN1_F_C2I_ASN1_BIT_STRING, i);

-    if ((ret != NULL) && ((a == NULL) || (*a != ret)))
+    if ((a == NULL) || (*a != ret))

         ASN1_BIT_STRING_free(ret);
     return (NULL);
 }
         ASN1_BIT_STRING_free(ret);
     return (NULL);
 }

diff --git a/crypto/asn1/a_int.c b/crypto/asn1/a_int.c
index a33e3fd8ef6833a9b4d4f8f06f1f62c367ac0ccf..65fac75698c21d20da17093ccdd1353a55ee3654 100644 (file)
--- a/crypto/asn1/a_int.c
+++ b/crypto/asn1/a_int.c
@@ -265,7 +265,7 @@ ASN1_INTEGER *c2i_ASN1_INTEGER(ASN1_INTEGER **a, const unsigned char **pp,
     return (ret);
  err:
     ASN1err(ASN1_F_C2I_ASN1_INTEGER, i);
     return (ret);
  err:
     ASN1err(ASN1_F_C2I_ASN1_INTEGER, i);

-    if ((ret != NULL) && ((a == NULL) || (*a != ret)))
+    if ((a == NULL) || (*a != ret))

         ASN1_INTEGER_free(ret);
     return (NULL);
 }
         ASN1_INTEGER_free(ret);
     return (NULL);
 }


@@ -334,7 +334,7 @@ ASN1_INTEGER *d2i_ASN1_UINTEGER(ASN1_INTEGER **a, const unsigned char **pp,
     return (ret);
  err:
     ASN1err(ASN1_F_D2I_ASN1_UINTEGER, i);
     return (ret);
  err:
     ASN1err(ASN1_F_D2I_ASN1_UINTEGER, i);

-    if ((ret != NULL) && ((a == NULL) || (*a != ret)))
+    if ((a == NULL) || (*a != ret))

         ASN1_INTEGER_free(ret);
     return (NULL);
 }
         ASN1_INTEGER_free(ret);
     return (NULL);
 }

diff --git a/crypto/asn1/a_utctm.c b/crypto/asn1/a_utctm.c
index 2dac3b58b4c629063cc6638c602c7d839cb1e4aa..0e2f1b0c40b506c2331536ac15f8ba9ef5b5139e 100644 (file)
--- a/crypto/asn1/a_utctm.c
+++ b/crypto/asn1/a_utctm.c
@@ -193,11 +193,11 @@ ASN1_UTCTIME *ASN1_UTCTIME_adj(ASN1_UTCTIME *s, time_t t,
     int free_s = 0;
 
     if (s == NULL) {
     int free_s = 0;
 
     if (s == NULL) {

-        free_s = 1;

         s = ASN1_UTCTIME_new();
         s = ASN1_UTCTIME_new();

+        if (s == NULL)
+            goto err;
+        free_s = 1;

     }
     }

-    if (s == NULL)
-        goto err;

 
     ts = OPENSSL_gmtime(&t, &data);
     if (ts == NULL)
 
     ts = OPENSSL_gmtime(&t, &data);
     if (ts == NULL)


@@ -233,7 +233,7 @@ ASN1_UTCTIME *ASN1_UTCTIME_adj(ASN1_UTCTIME *s, time_t t,
 #endif
     return (s);
  err:
 #endif
     return (s);
  err:

-    if (free_s && s)
+    if (free_s)

         ASN1_UTCTIME_free(s);
     return NULL;
 }
         ASN1_UTCTIME_free(s);
     return NULL;
 }

diff --git a/crypto/asn1/asn1_lib.c b/crypto/asn1/asn1_lib.c
index fe63b6249c2e9bb4dbcc7f3db7fcac019fef50f9..2e36cff055c5bc46e05a396968cb81bd410e7627 100644 (file)
--- a/crypto/asn1/asn1_lib.c
+++ b/crypto/asn1/asn1_lib.c
@@ -429,7 +429,9 @@ void ASN1_STRING_free(ASN1_STRING *a)
 
 void ASN1_STRING_clear_free(ASN1_STRING *a)
 {
 
 void ASN1_STRING_clear_free(ASN1_STRING *a)
 {

-    if (a && a->data && !(a->flags & ASN1_STRING_FLAG_NDEF))
+    if (a == NULL)
+        return;
+    if (a->data && !(a->flags & ASN1_STRING_FLAG_NDEF))

         OPENSSL_cleanse(a->data, a->length);
     ASN1_STRING_free(a);
 }
         OPENSSL_cleanse(a->data, a->length);
     ASN1_STRING_free(a);
 }

diff --git a/crypto/asn1/asn1_par.c b/crypto/asn1/asn1_par.c
index 20f3a88b8554ee4c2edf71443bf5da9fe89ace72..574e8de86704630c68441c171d2665b8571dc6e0 100644 (file)
--- a/crypto/asn1/asn1_par.c
+++ b/crypto/asn1/asn1_par.c
@@ -276,10 +276,8 @@ static int asn1_parse2(BIO *bp, const unsigned char **pp, long length,
                         nl = 1;
                     }
                 }
                         nl = 1;
                     }
                 }

-                if (os != NULL) {
-                    ASN1_OCTET_STRING_free(os);
-                    os = NULL;
-                }
+                ASN1_OCTET_STRING_free(os);
+                os = NULL;

             } else if (tag == V_ASN1_INTEGER) {
                 ASN1_INTEGER *bs;
                 int i;
             } else if (tag == V_ASN1_INTEGER) {
                 ASN1_INTEGER *bs;
                 int i;


@@ -356,10 +354,8 @@ static int asn1_parse2(BIO *bp, const unsigned char **pp, long length,
     }
     ret = 1;
  end:
     }
     ret = 1;
  end:

-    if (o != NULL)
-        ASN1_OBJECT_free(o);
-    if (os != NULL)
-        ASN1_OCTET_STRING_free(os);
+    ASN1_OBJECT_free(o);
+    ASN1_OCTET_STRING_free(os);

     *pp = p;
     return (ret);
 }
     *pp = p;
     return (ret);
 }

diff --git a/crypto/asn1/evp_asn1.c b/crypto/asn1/evp_asn1.c
index 3664576a818ec494b829ac82b31c787e4a0cae47..e6a5b5f28fe68db331af782bef172dd0b057974c 100644 (file)
--- a/crypto/asn1/evp_asn1.c
+++ b/crypto/asn1/evp_asn1.c
@@ -187,8 +187,7 @@ int ASN1_TYPE_get_int_octetstring(ASN1_TYPE *a, long *num,
  err:
         ASN1err(ASN1_F_ASN1_TYPE_GET_INT_OCTETSTRING, ASN1_R_DATA_IS_WRONG);
     }
  err:
         ASN1err(ASN1_F_ASN1_TYPE_GET_INT_OCTETSTRING, ASN1_R_DATA_IS_WRONG);
     }

-    if (os != NULL)
-        ASN1_OCTET_STRING_free(os);
+    ASN1_OCTET_STRING_free(os);

     if (ai != NULL)
         ASN1_INTEGER_free(ai);
     return (ret);
     if (ai != NULL)
         ASN1_INTEGER_free(ai);
     return (ret);

diff --git a/crypto/asn1/p5_pbe.c b/crypto/asn1/p5_pbe.c
index bdbfdcd67c0727daa2e11af247495e0e81e85521..d54b0943fec24efe92e984227a206e90deb6db8f 100644 (file)
--- a/crypto/asn1/p5_pbe.c
+++ b/crypto/asn1/p5_pbe.c
@@ -118,8 +118,7 @@ int PKCS5_pbe_set0_algor(X509_ALGOR *algor, int alg, int iter,
  err:
     if (pbe != NULL)
         PBEPARAM_free(pbe);
  err:
     if (pbe != NULL)
         PBEPARAM_free(pbe);

-    if (pbe_str != NULL)
-        ASN1_STRING_free(pbe_str);
+    ASN1_STRING_free(pbe_str);

     return 0;
 }
 
     return 0;
 }
 

diff --git a/crypto/asn1/tasn_fre.c b/crypto/asn1/tasn_fre.c
index 49c5793a497b4cd181d1e46fc441948e18a8efc0..bdc26f9bb4bf241f0224bdea2dda9f21bfa93410 100644 (file)
--- a/crypto/asn1/tasn_fre.c
+++ b/crypto/asn1/tasn_fre.c
@@ -85,6 +85,7 @@ static void asn1_item_combine_free(ASN1_VALUE **pval, const ASN1_ITEM *it,
     const ASN1_AUX *aux = it->funcs;
     ASN1_aux_cb *asn1_cb;
     int i;
     const ASN1_AUX *aux = it->funcs;
     ASN1_aux_cb *asn1_cb;
     int i;

+

     if (!pval)
         return;
     if ((it->itype != ASN1_ITYPE_PRIMITIVE) && !*pval)
     if (!pval)
         return;
     if ((it->itype != ASN1_ITYPE_PRIMITIVE) && !*pval)


@@ -116,6 +117,7 @@ static void asn1_item_combine_free(ASN1_VALUE **pval, const ASN1_ITEM *it,
         i = asn1_get_choice_selector(pval, it);
         if ((i >= 0) && (i < it->tcount)) {
             ASN1_VALUE **pchval;
         i = asn1_get_choice_selector(pval, it);
         if ((i >= 0) && (i < it->tcount)) {
             ASN1_VALUE **pchval;

+

             tt = it->templates + i;
             pchval = asn1_get_field_ptr(pval, tt);
             ASN1_template_free(pchval, tt);
             tt = it->templates + i;
             pchval = asn1_get_field_ptr(pval, tt);
             ASN1_template_free(pchval, tt);


@@ -170,35 +172,41 @@ static void asn1_item_combine_free(ASN1_VALUE **pval, const ASN1_ITEM *it,
 
 void ASN1_template_free(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt)
 {
 
 void ASN1_template_free(ASN1_VALUE **pval, const ASN1_TEMPLATE *tt)
 {

-    int i;

     if (tt->flags & ASN1_TFLG_SK_MASK) {
         STACK_OF(ASN1_VALUE) *sk = (STACK_OF(ASN1_VALUE) *)*pval;
     if (tt->flags & ASN1_TFLG_SK_MASK) {
         STACK_OF(ASN1_VALUE) *sk = (STACK_OF(ASN1_VALUE) *)*pval;

+        int i;
+

         for (i = 0; i < sk_ASN1_VALUE_num(sk); i++) {
         for (i = 0; i < sk_ASN1_VALUE_num(sk); i++) {

-            ASN1_VALUE *vtmp;
-            vtmp = sk_ASN1_VALUE_value(sk, i);
+            ASN1_VALUE *vtmp = sk_ASN1_VALUE_value(sk, i);
+

             asn1_item_combine_free(&vtmp, ASN1_ITEM_ptr(tt->item), 0);
         }
         sk_ASN1_VALUE_free(sk);
         *pval = NULL;
             asn1_item_combine_free(&vtmp, ASN1_ITEM_ptr(tt->item), 0);
         }
         sk_ASN1_VALUE_free(sk);
         *pval = NULL;

-    } else
+    } else {

         asn1_item_combine_free(pval, ASN1_ITEM_ptr(tt->item),
                                tt->flags & ASN1_TFLG_COMBINE);
         asn1_item_combine_free(pval, ASN1_ITEM_ptr(tt->item),
                                tt->flags & ASN1_TFLG_COMBINE);

+    }

 }
 
 void ASN1_primitive_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
 {
     int utype;
 }
 
 void ASN1_primitive_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
 {
     int utype;

+
+    /* Special case: if 'it' is a primitive with a free_func, use that. */

     if (it) {
     if (it) {

-        const ASN1_PRIMITIVE_FUNCS *pf;
-        pf = it->funcs;
+        const ASN1_PRIMITIVE_FUNCS *pf = it->funcs;
+

         if (pf && pf->prim_free) {
             pf->prim_free(pval, it);
             return;
         }
     }
         if (pf && pf->prim_free) {
             pf->prim_free(pval, it);
             return;
         }
     }

-    /* Special case: if 'it' is NULL free contents of ASN1_TYPE */
+
+    /* Special case: if 'it' is NULL, free contents of ASN1_TYPE */

     if (!it) {
         ASN1_TYPE *typ = (ASN1_TYPE *)*pval;
     if (!it) {
         ASN1_TYPE *typ = (ASN1_TYPE *)*pval;

+

         utype = typ->type;
         pval = &typ->value.asn1_value;
         if (!*pval)
         utype = typ->type;
         pval = &typ->value.asn1_value;
         if (!*pval)


@@ -235,8 +243,8 @@ void ASN1_primitive_free(ASN1_VALUE **pval, const ASN1_ITEM *it)
 
     default:
         ASN1_STRING_free((ASN1_STRING *)*pval);
 
     default:
         ASN1_STRING_free((ASN1_STRING *)*pval);

-        *pval = NULL;

         break;
     }
         break;
     }

-    *pval = NULL;
+    if (*pval)
+        *pval = NULL;

 }
 }

diff --git a/crypto/asn1/x_algor.c b/crypto/asn1/x_algor.c
index 0aa3dedbae51c86b6e9161b9f7ec9037eae3c1bc..30d648159fd97223a96d1a0c12f4147675d74e11 100644 (file)
--- a/crypto/asn1/x_algor.c
+++ b/crypto/asn1/x_algor.c
@@ -86,8 +86,7 @@ int X509_ALGOR_set0(X509_ALGOR *alg, ASN1_OBJECT *aobj, int ptype, void *pval)
             return 0;
     }
     if (alg) {
             return 0;
     }
     if (alg) {

-        if (alg->algorithm)
-            ASN1_OBJECT_free(alg->algorithm);
+        ASN1_OBJECT_free(alg->algorithm);

         alg->algorithm = aobj;
     }
     if (ptype == 0)
         alg->algorithm = aobj;
     }
     if (ptype == 0)

diff --git a/crypto/asn1/x_pkey.c b/crypto/asn1/x_pkey.c
index cf5fd804a9e8ffc8f783918142907d48a3db41ca..f4396e7d1777405604d11416a9ccf4de93660d1b 100644 (file)
--- a/crypto/asn1/x_pkey.c
+++ b/crypto/asn1/x_pkey.c
@@ -143,8 +143,7 @@ void X509_PKEY_free(X509_PKEY *x)
 
     if (x->enc_algor != NULL)
         X509_ALGOR_free(x->enc_algor);
 
     if (x->enc_algor != NULL)
         X509_ALGOR_free(x->enc_algor);

-    if (x->enc_pkey != NULL)
-        ASN1_OCTET_STRING_free(x->enc_pkey);
+    ASN1_OCTET_STRING_free(x->enc_pkey);

     if (x->dec_pkey != NULL)
         EVP_PKEY_free(x->dec_pkey);
     if ((x->key_data != NULL) && (x->key_free))
     if (x->dec_pkey != NULL)
         EVP_PKEY_free(x->dec_pkey);
     if ((x->key_data != NULL) && (x->key_free))

diff --git a/crypto/asn1/x_x509a.c b/crypto/asn1/x_x509a.c
index 2a2ca87178173e78887c065d1395bcaa5da657f1..8be50b55e27d1e377395d71169eb0c55259a40dc 100644 (file)
--- a/crypto/asn1/x_x509a.c
+++ b/crypto/asn1/x_x509a.c
@@ -159,8 +159,7 @@ int X509_add1_trust_object(X509 *x, ASN1_OBJECT *obj)
     if (!objtmp || sk_ASN1_OBJECT_push(aux->trust, objtmp))
         return 1;
  err:
     if (!objtmp || sk_ASN1_OBJECT_push(aux->trust, objtmp))
         return 1;
  err:

-    if (objtmp)
-        ASN1_OBJECT_free(objtmp);
+    ASN1_OBJECT_free(objtmp);

     return 0;
 }
 
     return 0;
 }
 

diff --git a/crypto/dh/dh_ameth.c b/crypto/dh/dh_ameth.c
index 2c77381a48a10ee242d17185465e5d4cd3696fc8..e7d56f1a895b4e06ec404becec1ad1edf0baf5b9 100644 (file)
--- a/crypto/dh/dh_ameth.c
+++ b/crypto/dh/dh_ameth.c
@@ -191,8 +191,7 @@ static int dh_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
  err:
     if (penc)
         OPENSSL_free(penc);
  err:
     if (penc)
         OPENSSL_free(penc);

-    if (str)
-        ASN1_STRING_free(str);
+    ASN1_STRING_free(str);

 
     return 0;
 }
 
     return 0;
 }


@@ -297,8 +296,7 @@ static int dh_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
  err:
     if (dp != NULL)
         OPENSSL_free(dp);
  err:
     if (dp != NULL)
         OPENSSL_free(dp);

-    if (params != NULL)
-        ASN1_STRING_free(params);
+    ASN1_STRING_free(params);

     if (prkey != NULL)
         ASN1_STRING_clear_free(prkey);
     return 0;
     if (prkey != NULL)
         ASN1_STRING_clear_free(prkey);
     return 0;

diff --git a/crypto/dh/dh_pmeth.c b/crypto/dh/dh_pmeth.c
index 8975f4492a124bb735b496362592d76c5d5701c5..668f5f3a87e547c1b62cad719fe3c88c2cd63006 100644 (file)
--- a/crypto/dh/dh_pmeth.c
+++ b/crypto/dh/dh_pmeth.c
@@ -155,8 +155,7 @@ static void pkey_dh_cleanup(EVP_PKEY_CTX *ctx)
     if (dctx) {
         if (dctx->kdf_ukm)
             OPENSSL_free(dctx->kdf_ukm);
     if (dctx) {
         if (dctx->kdf_ukm)
             OPENSSL_free(dctx->kdf_ukm);

-        if (dctx->kdf_oid)
-            ASN1_OBJECT_free(dctx->kdf_oid);
+        ASN1_OBJECT_free(dctx->kdf_oid);

         OPENSSL_free(dctx);
     }
 }
         OPENSSL_free(dctx);
     }
 }


@@ -245,8 +244,7 @@ static int pkey_dh_ctrl(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)
         return dctx->kdf_ukmlen;
 
     case EVP_PKEY_CTRL_DH_KDF_OID:
         return dctx->kdf_ukmlen;
 
     case EVP_PKEY_CTRL_DH_KDF_OID:

-        if (dctx->kdf_oid)
-            ASN1_OBJECT_free(dctx->kdf_oid);
+        ASN1_OBJECT_free(dctx->kdf_oid);

         dctx->kdf_oid = p2;
         return 1;
 
         dctx->kdf_oid = p2;
         return 1;
 

diff --git a/crypto/dsa/dsa_ameth.c b/crypto/dsa/dsa_ameth.c
index d63c417d9f583e60c6b824529c53afe9fb89e87f..425144ac1c170b4c3dfd285720b791de43126122 100644 (file)
--- a/crypto/dsa/dsa_ameth.c
+++ b/crypto/dsa/dsa_ameth.c
@@ -166,8 +166,7 @@ static int dsa_pub_encode(X509_PUBKEY *pk, const EVP_PKEY *pkey)
  err:
     if (penc)
         OPENSSL_free(penc);
  err:
     if (penc)
         OPENSSL_free(penc);

-    if (str)
-        ASN1_STRING_free(str);
+    ASN1_STRING_free(str);

 
     return 0;
 }
 
     return 0;
 }


@@ -328,8 +327,7 @@ static int dsa_priv_encode(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pkey)
  err:
     if (dp != NULL)
         OPENSSL_free(dp);
  err:
     if (dp != NULL)
         OPENSSL_free(dp);

-    if (params != NULL)
-        ASN1_STRING_free(params);
+    ASN1_STRING_free(params);

     if (prkey != NULL)
         ASN1_STRING_clear_free(prkey);
     return 0;
     if (prkey != NULL)
         ASN1_STRING_clear_free(prkey);
     return 0;

diff --git a/crypto/ec/ec_asn1.c b/crypto/ec/ec_asn1.c
index 87cc334444c6186b26f151a6fb13e78492acb053..90de23b11607a71dd880fde1b1cc841ffde16f08 100644 (file)
--- a/crypto/ec/ec_asn1.c
+++ b/crypto/ec/ec_asn1.c
@@ -317,8 +317,7 @@ static int ec_asn1_group2fieldid(const EC_GROUP *group, X9_62_FIELDID *field)
         return 0;
 
     /* clear the old values (if necessary) */
         return 0;
 
     /* clear the old values (if necessary) */

-    if (field->fieldType != NULL)
-        ASN1_OBJECT_free(field->fieldType);
+    ASN1_OBJECT_free(field->fieldType);

     if (field->p.other != NULL)
         ASN1_TYPE_free(field->p.other);
 
     if (field->p.other != NULL)
         ASN1_TYPE_free(field->p.other);
 


@@ -654,7 +653,7 @@ ECPKPARAMETERS *ec_asn1_group2pkparameters(const EC_GROUP *group,
             return NULL;
         }
     } else {
             return NULL;
         }
     } else {

-        if (ret->type == 0 && ret->value.named_curve)
+        if (ret->type == 0)

             ASN1_OBJECT_free(ret->value.named_curve);
         else if (ret->type == 1 && ret->value.parameters)
             ECPARAMETERS_free(ret->value.parameters);
             ASN1_OBJECT_free(ret->value.named_curve);
         else if (ret->type == 1 && ret->value.parameters)
             ECPARAMETERS_free(ret->value.parameters);

diff --git a/crypto/ocsp/ocsp_lib.c b/crypto/ocsp/ocsp_lib.c
index 8e87f49a5d8041c5ad5a993e7b5b7f1208d71c62..34df9ac04ed26f0ffe3f05f122765e605dee9dac 100644 (file)
--- a/crypto/ocsp/ocsp_lib.c
+++ b/crypto/ocsp/ocsp_lib.c
@@ -110,8 +110,7 @@ OCSP_CERTID *OCSP_cert_id_new(const EVP_MD *dgst,
         goto err;
 
     alg = cid->hashAlgorithm;
         goto err;
 
     alg = cid->hashAlgorithm;

-    if (alg->algorithm != NULL)
-        ASN1_OBJECT_free(alg->algorithm);
+    ASN1_OBJECT_free(alg->algorithm);

     if ((nid = EVP_MD_type(dgst)) == NID_undef) {
         OCSPerr(OCSP_F_OCSP_CERT_ID_NEW, OCSP_R_UNKNOWN_NID);
         goto err;
     if ((nid = EVP_MD_type(dgst)) == NID_undef) {
         OCSPerr(OCSP_F_OCSP_CERT_ID_NEW, OCSP_R_UNKNOWN_NID);
         goto err;

diff --git a/crypto/ocsp/v3_ocsp.c b/crypto/ocsp/v3_ocsp.c
index 655811671ac1ebe06abb4583d683f0f4a7bd6263..7e502d796259f36eb0ff0c985d2390bce5c610b5 100644 (file)
--- a/crypto/ocsp/v3_ocsp.c
+++ b/crypto/ocsp/v3_ocsp.c
@@ -247,7 +247,7 @@ static void *d2i_ocsp_nonce(void *a, const unsigned char **pp, long length)
     return os;
 
  err:
     return os;
 
  err:

-    if (os && (!pos || (*pos != os)))
+    if ((pos == NULL) || (*pos != os))

         ASN1_OCTET_STRING_free(os);
     OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
     return NULL;
         ASN1_OCTET_STRING_free(os);
     OCSPerr(OCSP_F_D2I_OCSP_NONCE, ERR_R_MALLOC_FAILURE);
     return NULL;

diff --git a/crypto/rsa/rsa_ameth.c b/crypto/rsa/rsa_ameth.c
index 6f4c1048588da9b388fd995c4fd47709b690cf0f..071dbb8d680f4f01174a184417524888b75540ab 100644 (file)
--- a/crypto/rsa/rsa_ameth.c
+++ b/crypto/rsa/rsa_ameth.c
@@ -484,8 +484,7 @@ static int rsa_md_to_mgf1(X509_ALGOR **palg, const EVP_MD *mgf1md)
     X509_ALGOR_set0(*palg, OBJ_nid2obj(NID_mgf1), V_ASN1_SEQUENCE, stmp);
     stmp = NULL;
  err:
     X509_ALGOR_set0(*palg, OBJ_nid2obj(NID_mgf1), V_ASN1_SEQUENCE, stmp);
     stmp = NULL;
  err:

-    if (stmp)
-        ASN1_STRING_free(stmp);
+    ASN1_STRING_free(stmp);

     if (algtmp)
         X509_ALGOR_free(algtmp);
     if (*palg)
     if (algtmp)
         X509_ALGOR_free(algtmp);
     if (*palg)


@@ -576,8 +575,7 @@ static ASN1_STRING *rsa_ctx_to_pss(EVP_PKEY_CTX *pkctx)
         RSA_PSS_PARAMS_free(pss);
     if (rv)
         return os;
         RSA_PSS_PARAMS_free(pss);
     if (rv)
         return os;

-    if (os)
-        ASN1_STRING_free(os);
+    ASN1_STRING_free(os);

     return NULL;
 }
 
     return NULL;
 }
 


@@ -921,8 +919,7 @@ static int rsa_cms_encrypt(CMS_RecipientInfo *ri)
  err:
     if (oaep)
         RSA_OAEP_PARAMS_free(oaep);
  err:
     if (oaep)
         RSA_OAEP_PARAMS_free(oaep);

-    if (os)
-        ASN1_STRING_free(os);
+    ASN1_STRING_free(os);

     return rv;
 }
 
     return rv;
 }
 

diff --git a/crypto/rsa/rsa_saos.c b/crypto/rsa/rsa_saos.c
index 6ebab3db55d9c4cb590aab5916913259b5c994d9..0f15f0084201bb9bbd23d2122bd4d5a75f1307b7 100644 (file)
--- a/crypto/rsa/rsa_saos.c
+++ b/crypto/rsa/rsa_saos.c
@@ -138,8 +138,7 @@ int RSA_verify_ASN1_OCTET_STRING(int dtype,
     } else
         ret = 1;
  err:
     } else
         ret = 1;
  err:

-    if (sig != NULL)
-        ASN1_OCTET_STRING_free(sig);
+    ASN1_OCTET_STRING_free(sig);

     if (s != NULL) {
         OPENSSL_cleanse(s, (unsigned int)siglen);
         OPENSSL_free(s);
     if (s != NULL) {
         OPENSSL_cleanse(s, (unsigned int)siglen);
         OPENSSL_free(s);

diff --git a/crypto/x509v3/pcy_data.c b/crypto/x509v3/pcy_data.c
index 90e9970e46c03ab41365ec2571dae339a16858d8..3a8d4328d533eed671e2cc3286de5b4405bf84d7 100644 (file)
--- a/crypto/x509v3/pcy_data.c
+++ b/crypto/x509v3/pcy_data.c
@@ -102,8 +102,7 @@ X509_POLICY_DATA *policy_data_new(POLICYINFO *policy,
     ret->expected_policy_set = sk_ASN1_OBJECT_new_null();
     if (!ret->expected_policy_set) {
         OPENSSL_free(ret);
     ret->expected_policy_set = sk_ASN1_OBJECT_new_null();
     if (!ret->expected_policy_set) {
         OPENSSL_free(ret);

-        if (id)
-            ASN1_OBJECT_free(id);
+        ASN1_OBJECT_free(id);

         return NULL;
     }
 
         return NULL;
     }
 

diff --git a/crypto/x509v3/v3_conf.c b/crypto/x509v3/v3_conf.c
index 9631e57b77319f3931f9aa81fa2ea6fd5fbbcf05..eb9cfea66d0ac730215d8914871f4c1cbf4b71b3 100644 (file)
--- a/crypto/x509v3/v3_conf.c
+++ b/crypto/x509v3/v3_conf.c
@@ -212,8 +212,7 @@ static X509_EXTENSION *do_ext_i2d(const X509V3_EXT_METHOD *method,
     X509V3err(X509V3_F_DO_EXT_I2D, ERR_R_MALLOC_FAILURE);
     if (ext_der != NULL)
         OPENSSL_free(ext_der);
     X509V3err(X509V3_F_DO_EXT_I2D, ERR_R_MALLOC_FAILURE);
     if (ext_der != NULL)
         OPENSSL_free(ext_der);

-    if (ext_oct != NULL)
-        ASN1_OCTET_STRING_free(ext_oct);
+    ASN1_OCTET_STRING_free(ext_oct);

     return NULL;
 
 }
     return NULL;
 
 }

diff --git a/crypto/x509v3/v3_pci.c b/crypto/x509v3/v3_pci.c
index 5a937170f8d79d908e72131c93f7d3481f8662be..4139b34cbc510b9e9148b7f870f2287b06bb856c 100644 (file)
--- a/crypto/x509v3/v3_pci.c
+++ b/crypto/x509v3/v3_pci.c
@@ -305,10 +305,7 @@ static PROXY_CERT_INFO_EXTENSION *r2i_pci(X509V3_EXT_METHOD *method,
     pathlen = NULL;
     goto end;
  err:
     pathlen = NULL;
     goto end;
  err:

-    if (language) {
-        ASN1_OBJECT_free(language);
-        language = NULL;
-    }
+    ASN1_OBJECT_free(language);

     if (pathlen) {
         ASN1_INTEGER_free(pathlen);
         pathlen = NULL;
     if (pathlen) {
         ASN1_INTEGER_free(pathlen);
         pathlen = NULL;

diff --git a/doc/crypto/ASN1_OBJECT_new.pod b/doc/crypto/ASN1_OBJECT_new.pod
index 338b72653e52f5d1e9a4983d09f95b0ca896f1cc..36fc5716ece938a92414d1179f5e423a3e373d02 100644 (file)
--- a/doc/crypto/ASN1_OBJECT_new.pod
+++ b/doc/crypto/ASN1_OBJECT_new.pod
@@ -19,6 +19,7 @@ ASN1_OBJECT structure, which represents an ASN1 OBJECT IDENTIFIER.
 ASN1_OBJECT_new() allocates and initializes a ASN1_OBJECT structure.
 
 ASN1_OBJECT_free() frees up the B<ASN1_OBJECT> structure B<a>.
 ASN1_OBJECT_new() allocates and initializes a ASN1_OBJECT structure.
 
 ASN1_OBJECT_free() frees up the B<ASN1_OBJECT> structure B<a>.

+If B<a> is NULL, nothing is done.

 
 =head1 NOTES
 
 
 =head1 NOTES
 

diff --git a/doc/crypto/ASN1_STRING_new.pod b/doc/crypto/ASN1_STRING_new.pod
index 8ac2a03ae267a254f886c4ee5f2b83e055b18f05..6c0b303c27c95097e1581a5fef3a6c7693e76bfc 100644 (file)
--- a/doc/crypto/ASN1_STRING_new.pod
+++ b/doc/crypto/ASN1_STRING_new.pod
@@ -22,6 +22,7 @@ ASN1_STRING_type_new() returns an allocated B<ASN1_STRING> structure of
 type B<type>.
 
 ASN1_STRING_free() frees up B<a>.
 type B<type>.
 
 ASN1_STRING_free() frees up B<a>.

+If B<a> is NULL nothing is done.

 
 =head1 NOTES
 
 
 =head1 NOTES