2831     size_t pmslen = 0;  in tls_construct_cke_rsa()  local
2847     pmslen = SSL_MAX_MASTER_KEY_LENGTH;  in tls_construct_cke_rsa()
2848     pms = OPENSSL_malloc(pmslen);  in tls_construct_cke_rsa()
2856     if (RAND_bytes_ex(s->ctx->libctx, pms + 2, pmslen - 2, 0) <= 0) {  in tls_construct_cke_rsa()
2869         || EVP_PKEY_encrypt(pctx, NULL, &enclen, pms, pmslen) <= 0) {  in tls_construct_cke_rsa()
2874             || EVP_PKEY_encrypt(pctx, encdata, &enclen, pms, pmslen) <= 0) {  in tls_construct_cke_rsa()
2888     if (!ssl_log_rsa_client_key_exchange(s, encdata, enclen, pms, pmslen)) {  in tls_construct_cke_rsa()
2894     s->s3.tmp.pmslen = pmslen;  in tls_construct_cke_rsa()
2898     OPENSSL_clear_free(pms, pmslen);  in tls_construct_cke_rsa()
3023     size_t pmslen = 0;  in tls_construct_cke_gost()  local
3052     pmslen = 32;  in tls_construct_cke_gost()
3053     pms = OPENSSL_malloc(pmslen);  in tls_construct_cke_gost()
3062         || RAND_bytes_ex(s->ctx->libctx, pms, pmslen, 0) <= 0) {  in tls_construct_cke_gost()
3093     if (EVP_PKEY_encrypt(pkey_ctx, tmp, &msglen, pms, pmslen) <= 0) {  in tls_construct_cke_gost()
3107     s->s3.tmp.pmslen = pmslen;  in tls_construct_cke_gost()
3112     OPENSSL_clear_free(pms, pmslen);  in tls_construct_cke_gost()
3166     size_t pmslen = 0;  in tls_construct_cke_gost18()  local
3181     pmslen = 32;  in tls_construct_cke_gost18()
3182     pms = OPENSSL_malloc(pmslen);  in tls_construct_cke_gost18()
3188     if (RAND_bytes_ex(s->ctx->libctx, pms, pmslen, 0) <= 0) {  in tls_construct_cke_gost18()
3227     if (EVP_PKEY_encrypt(pkey_ctx, NULL, &msglen, pms, pmslen) <= 0) {  in tls_construct_cke_gost18()
3233             || EVP_PKEY_encrypt(pkey_ctx, encdata, &msglen, pms, pmslen) <= 0) {  in tls_construct_cke_gost18()
3241     s->s3.tmp.pmslen = pmslen;  in tls_construct_cke_gost18()
3246     OPENSSL_clear_free(pms, pmslen);  in tls_construct_cke_gost18()
3320     OPENSSL_clear_free(s->s3.tmp.pms, s->s3.tmp.pmslen);  in tls_construct_client_key_exchange()
3322     s->s3.tmp.pmslen = 0;  in tls_construct_client_key_exchange()
3334     size_t pmslen = 0;  in tls_client_key_exchange_post_work()  local
3337     pmslen = s->s3.tmp.pmslen;  in tls_client_key_exchange_post_work()
3354     if (!ssl_generate_master_secret(s, pms, pmslen, 1)) {  in tls_client_key_exchange_post_work()
3358         pmslen = 0;  in tls_client_key_exchange_post_work()
3362     pmslen = 0;  in tls_client_key_exchange_post_work()
3396     OPENSSL_clear_free(pms, pmslen);  in tls_client_key_exchange_post_work()
3398     s->s3.tmp.pmslen = 0;  in tls_client_key_exchange_post_work()