| 
                         verify_name_constraints: events 1-18 
                        
                          
                            |    61 |   |   if (ext_idx < 0) |  
                            |       |   |      ^ |  
                            |       |   |      | |  
                            |       |   |      (1) following ‘false’ branch... |  
                          
| [...] |  |  
                          
                            |    69 |   |   name_constraints_ext = X509_get_ext (x509, ext_idx); |  
                            |       |   |                          ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |  
                            |       |   |                          | |  
                            |       |   |                          (2) ...to here |  
                            |    70 |   |   if (!name_constraints_ext) |  
                            |       |   |      ~ |  
                            |       |   |      | |  
                            |       |   |      (3) following ‘false’ branch... |  
                          
| [...] |  |  
                          
                            |    77 |   |   ext_data = X509_EXTENSION_get_data (name_constraints_ext); |  
                            |       |   |              ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |  
                            |       |   |              | |  
                            |       |   |              (4) ...to here |  
                            |    78 |   |   if (!ext_data) |  
                            |       |   |      ~ |  
                            |       |   |      | |  
                            |       |   |      (5) following ‘false’ branch... |  
                          
| [...] |  |  
                          
                            |    85 |   |   bio = BIO_new (BIO_s_mem ()); |  
                            |       |   |         ~~~~~~~~~~~~~~~~~~~~~~ |  
                            |       |   |         | |  
                            |       |   |         (6) ...to here |  
                            |    86 |   |   if (!bio) |  
                            |       |   |      ~ |  
                            |       |   |      | |  
                            |       |   |      (7) following ‘false’ branch... |  
                          
| [...] |  |  
                          
                            |    93 |   |   if (!X509V3_EXT_print (bio, name_constraints_ext, 0, 0)) |  
                            |       |   |      ~ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |  
                            |       |   |      | | |  
                            |       |   |      | (8) ...to here |  
                            |       |   |      (9) following ‘false’ branch... |  
                          
| [...] |  |  
                          
                            |   101 |   |   ext_len = BIO_pending (bio); |  
                            |       |   |             ~ |  
                            |       |   |             | |  
                            |       |   |             (10) ...to here |  
                            |   102 |   |   if (ext_len <= 0) |  
                            |       |   |      ~ |  
                            |       |   |      | |  
                            |       |   |      (11) following ‘false’ branch (when ‘ext_len > 0’)... |  
                          
| [...] |  |  
                          
                            |   109 |   |   ext_str = malloc (ext_len + 1); |  
                            |       |   |             ~~~~~~~~~~~~~~~~~~~~ |  
                            |       |   |             |       | |  
                            |       |   |             |       (12) ...to here |  
                            |       |   |             (13) allocated here |  
                            |   110 |   |   if (!ext_str) |  
                            |       |   |      ~ |  
                            |       |   |      | |  
                            |       |   |      (14) assuming ‘ext_str’ is non-NULL |  
                            |       |   |      (15) following ‘false’ branch (when ‘ext_str’ is non-NULL)... |  
                          
| [...] |  |  
                          
                            |   118 |   |   BIO_read (bio, ext_str, ext_len); |  
                            |       |   |   ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ |  
                            |       |   |   | |  
                            |       |   |   (16) ...to here |  
                            |       |   |   (17) if ‘BIO_read’ throws an exception... |  
                            |       |   |   (18) ‘ext_str’ leaks here; was allocated at ]8;;sarif:/runs/0/results/0/codeFlows/0/threadFlows/0/locations/12(13)]8;; |  
                          
                         
                       |