    /* -*- Mode: C++; tab-width: 4; indent-tabs-mode: nil; c-basic-offset: 4; fill-column: 100 -*- */
    /*
     * This file is part of the LibreOffice project.
     *
     * This Source Code Form is subject to the terms of the Mozilla Public
     * License, v. 2.0. If a copy of the MPL was not distributed with this
     * file, You can obtain one at http://mozilla.org/MPL/2.0/.
     *
     * This file incorporates work covered by the following license notice:
     *
     *   Licensed to the Apache Software Foundation (ASF) under one or more
     *   contributor license agreements. See the NOTICE file distributed
     *   with this work for additional information regarding copyright
     *   ownership. The ASF licenses this file to you under the Apache
     *   License, Version 2.0 (the "License"); you may not use this file
     *   except in compliance with the License. You may obtain a copy of
     *   the License at http://www.apache.org/licenses/LICENSE-2.0 .
     */
    #include "akmngr.hxx"

    #include <xmlsec/xmlsec.h>
    #include <xmlsec/keys.h>
    #include <xmlsec/keysmngr.h>
    #include <xmlsec/transforms.h>
    #include <xmlsec/errors.h>

    #include <xmlsec/mscng/crypto.h>
    #include <xmlsec/mscng/keysstore.h>
    #include <xmlsec/mscng/x509.h>
    #include <svl/cryptosign.hxx>

    namespace xmlsecurity
    {

    /**
     * MSCryptoAppliedKeysMngrCreate:
     *
     * Create and load key store and certificate database into keys manager
     *
     * Returns keys manager pointer on success or NULL otherwise.
     */
    xmlSecKeysMngrPtr MSCryptoAppliedKeysMngrCreate()
    {
        xmlSecKeysMngrPtr        keyMngr = nullptr ;
        xmlSecKeyStorePtr        keyStore = nullptr ;

        keyStore = xmlSecKeyStoreCreate(xmlSecMSCngKeysStoreId);
        if (keyStore == nullptr)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        nullptr,
                        "xmlSecKeyStoreCreate",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE) ;
            return nullptr ;
        }

        /*-
         * At present, MS Crypto engine do not provide a way to setup a key store.
         */
        if (keyStore != nullptr)
        {
            /*TODO: binding key store.*/
        }

        keyMngr = xmlSecKeysMngrCreate() ;
        if (keyMngr == nullptr)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        nullptr,
                        "xmlSecKeysMngrCreate",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE) ;

            xmlSecKeyStoreDestroy(keyStore) ;
            return nullptr ;
        }

        /*-
         * Add key store to manager, from now on keys manager destroys the store if
         * needed
         */
        if (xmlSecKeysMngrAdoptKeysStore(keyMngr, keyStore) < 0)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        xmlSecErrorsSafeString(xmlSecKeyStoreGetName(keyStore)),
                        "xmlSecKeysMngrAdoptKeyStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE) ;

            xmlSecKeyStoreDestroy(keyStore) ;
            xmlSecKeysMngrDestroy(keyMngr) ;
            return nullptr ;
        }

        /*-
         * Initialize crypto library specific data in keys manager
         */
        if (xmlSecMSCngKeysMngrInit(keyMngr) < 0)
        {
             xmlSecError(XMLSEC_ERRORS_HERE,
                        nullptr,
                        "xmlSecMSCngKeysMngrInit",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE);

            xmlSecKeysMngrDestroy(keyMngr);
            return nullptr;
        }

        /*-
         * Set certificate database to X509 key data store
         */
        /*-
         * At present, MS Crypto engine do not provide a way to setup a cert store.
         */

        /*-
         * Set the getKey callback
         */
        keyMngr->getKey = xmlSecKeysMngrGetKey ;

        return keyMngr ;
    }

    int
    MSCryptoAppliedKeysMngrAdoptKeyStore(
        xmlSecKeysMngrPtr    mngr,
        HCERTSTORE keyStore
    )
    {
        xmlSecKeyDataStorePtr x509Store ;

        xmlSecAssert2(mngr != nullptr, -1) ;
        xmlSecAssert2(keyStore != nullptr, -1) ;

        x509Store = xmlSecKeysMngrGetDataStore(mngr, xmlSecMSCngX509StoreId);
        if (x509Store == nullptr)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        nullptr,
                        "xmlSecKeysMngrGetDataStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE) ;
            return -1 ;
        }

        if (xmlSecMSCngX509StoreAdoptKeyStore(x509Store, keyStore) < 0)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        xmlSecErrorsSafeString(xmlSecKeyDataStoreGetName(x509Store)),
                        "xmlSecMSCngX509StoreAdoptKeyStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE);
            return -1;
        }

        return 0 ;
    }

    int
    MSCryptoAppliedKeysMngrAdoptTrustedStore(
        xmlSecKeysMngrPtr    mngr,
        HCERTSTORE trustedStore
    )
    {
        xmlSecKeyDataStorePtr x509Store ;

        xmlSecAssert2(mngr != nullptr, -1) ;
        xmlSecAssert2(trustedStore != nullptr, -1) ;

        x509Store = xmlSecKeysMngrGetDataStore(mngr, xmlSecMSCngX509StoreId);
        if (x509Store == nullptr)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        nullptr,
                        "xmlSecKeysMngrGetDataStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE) ;
            return -1 ;
        }

        if (xmlSecMSCngX509StoreAdoptTrustedStore(x509Store, trustedStore) < 0)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        xmlSecErrorsSafeString(xmlSecKeyDataStoreGetName(x509Store)),
                        "xmlSecMSCngX509StoreAdoptKeyStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE);
            return -1;
        }

        return 0 ;
    }

    int
    MSCryptoAppliedKeysMngrAdoptUntrustedStore(
        xmlSecKeysMngrPtr    mngr,
        HCERTSTORE untrustedStore
    )
    {
        xmlSecKeyDataStorePtr x509Store ;

        xmlSecAssert2(mngr != nullptr, -1) ;
        xmlSecAssert2(untrustedStore != nullptr, -1) ;

        x509Store = xmlSecKeysMngrGetDataStore(mngr, xmlSecMSCngX509StoreId);
        if (x509Store == nullptr)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        nullptr,
                        "xmlSecKeysMngrGetDataStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE) ;
            return -1 ;
        }

        if (xmlSecMSCngX509StoreAdoptUntrustedStore(x509Store, untrustedStore) < 0)
        {
            xmlSecError(XMLSEC_ERRORS_HERE,
                        xmlSecErrorsSafeString(xmlSecKeyDataStoreGetName(x509Store)),
                        "xmlSecMSCngX509StoreAdoptKeyStore",
                        XMLSEC_ERRORS_R_XMLSEC_FAILED,
                        XMLSEC_ERRORS_NO_MESSAGE);
            return -1;
        }

        return 0 ;
    }

    }

    /* vim:set shiftwidth=4 softtabstop=4 expandtab cinoptions=b1,g0,N-s cinkeys+=0=break: */

↑ V547 Expression 'keyStore != nullptr' is always true.