Hi, I found a potential null pointer dereference bug in the project source code of openssl, and I have shown the execution sequence of the program that may generate the bug on the graph below. The red text illustrates the steps that generate the bug, the red arrows represent the call relationships, the file path can be seen in the blue framed section.

Although the code shown is for version 1.1.1, this potential bug is still present in the current version

would you can help to check if this bug is true?thank you!