Bug path

‘test_1’: events 1-4
12void test_1 (void *ptr, int a, int b)
^~~~~~
|
(1) entry to ‘test_1’
13{
14 if (a)
~
|
(2) following ‘true’ branch (when ‘a != 0’)...
15 calls_free_1 (ptr);
~~~~~~~~~~~~~~~~~~
|
(3) ...to here
(4) calling ‘calls_free_1’ from ‘test_1’
‘calls_free_1’: events 5-6
7void calls_free_1 (void *ptr)
^~~~~~~~~~~~
|
(5) entry to ‘calls_free_1’
8{
9 free (ptr); /* { dg-warning "double-'free' of 'ptr'" } */
~~~~~~~~~~
|
(6) first ‘free’ here
‘test_1’: events 7-10
15 calls_free_1 (ptr);
^~~~~~~~~~~~~~~~~~
|
(7) returning to ‘test_1’ from ‘calls_free_1’
16
17 if (b)
~
|
(8) following ‘false’ branch (when ‘b == 0’)...
[...]
21 calls_free_1 (ptr);
~~~~~~~~~~~~~~~~~~
|
(9) ...to here
(10) passing freed pointer ‘ptr’ in call to ‘calls_free_1’ from ‘test_1’
‘calls_free_1’: events 11-12
7void calls_free_1 (void *ptr)
^~~~~~~~~~~~
|
(11) entry to ‘calls_free_1’
8{
9 free (ptr); /* { dg-warning "double-'free' of 'ptr'" } */
~~~~~~~~~~
|
(12) second ‘free’ here; first ‘free’ was at (6)