OpenSSL 1.0.0.g callgraph for X.509 parsing bug

Simple grep for finding any possible code calling the affected OpenSSL functions:

find . -exec grep -wnHP '(asn1_d2i_read_bio|ASN1_d2i_bio|ASN1_d2i_fp|d2i_RSA_PUBKEY_fp|ASN1_item_d2i_bio|ASN1_item_d2i_fp|d2i_PKCS12_fp|d2i_X509_fp|d2i_X509_CRL_fp|d2i_PKCS7_fp|d2i_X509_REQ_fp|d2i_RSAPrivateKey_fp|d2i_RSAPublicKey_fp|b64_read_asn1|SMIME_read_ASN1|SMIME_read_CMS|SMIME_read_PKCS7|d2i_CMS_bio|d2i_PKCS12_bio|d2i_X509_bio|X509_load_cert_file|SSL_use_certificate_file|d2i_X509_CRL_bio|X509_load_crl_file|get_cert_by_subject|x509_dir_lookup|X509_LOOKUP_hash_dir|X509_STORE_set_default_paths|SSL_CTX_set_default_verify_paths|X509_STORE_load_locations|SSL_CTX_load_verify_locations|d2i_PKCS7_bio|d2i_X509_REQ_bio|d2i_RSAPrivateKey_bio|SSL_use_RSAPrivateKey_file|SSL_CTX_use_RSAPrivateKey_file|d2i_RSAPublicKey_bio)' {} ';'


Callgraph from openssl 1.0.0g, leftmost are callees, to the right callers:

asn1_d2i_read_bio
    ASN1_d2i_bio
        ASN1_d2i_fp
            d2i_RSA_PUBKEY_fp
    ASN1_item_d2i_bio
        ASN1_item_d2i_fp
            d2i_PKCS12_fp
                main (demos/pkread.c)
            d2i_X509_fp
            d2i_X509_CRL_fp
            d2i_PKCS7_fp
            d2i_X509_REQ_fp
            d2i_RSAPrivateKey_fp
            d2i_RSAPublicKey_fp
        b64_read_asn1
            SMIME_read_ASN1
                SMIME_read_CMS
                    main (demos/cms/cms_dec.c)
                    main (demos/cms/cms_uncomp.c)
                    main (demos/cms/cms_ver.c)
                SMIME_read_PKCS7
                    main (apps/smime.c)
                    main (demos/smime/smdec.c)
                    main (demos/smime/smver.c)
        d2i_CMS_bio
            main (apps/cms.c)
        d2i_PKCS12_bio
            load_pkcs12 (apps/apps.c)
            main (apps/pkcs12.c)
        d2i_X509_bio
            load_cert (apps/apps.c)
            X509_load_cert_file
            SSL_use_certificate_file
        d2i_X509_CRL_bio
            load_crl (apps/crl.c)
            main (apps/crl2p7.c)
            X509_load_crl_file
                get_cert_by_subject
                    x509_dir_lookup (some callback struct)
                        X509_LOOKUP_hash_dir
                            X509_STORE_set_default_paths
                                main (crypto/pkcs7/dec.c)
                                main (crypto/pkcs7/verify.c)
                                SSL_CTX_set_default_verify_paths
                                    many apps/*.c and test *.c files (main() function)
                            X509_STORE_load_locations
                                SSL_CTX_load_verify_locations
                                    many demos, apps and test *.c files
                                many *.c files (main() functions)
                            many files in apps/*.c
        d2i_PKCS7_bio
            apps/*.c files
        d2i_X509_REQ_bio
            main (apps/req.c)
        d2i_RSAPrivateKey_bio
            SSL_use_RSAPrivateKey_file
            SSL_CTX_use_RSAPrivateKey_file
                main (ssl/ssl_task.c)
                main (demos/ssl/inetdsrv.cpp)
                main (crypto/threads/mttest.c)
        d2i_RSAPublicKey_bio
            load_pubkey (apps/apps.c)
        load_cert (apps/apps.c)
            lot of files from apps/, seems to read only from disk (this is the openssl binary executable(s))