Bug path
‘test’
:
events 1-3
12
if (!new_table)
^
|
(1) following ‘false’ branch (when ‘new_table’ is non-NULL)...
13
return NULL;
14
new_table->m_f = (char **)malloc(sizeof(char **));
~~~~~~~~~~~~~~~~~~~~~~~
|
(2) ...to here
(3) this call could return NULL
‘test’
:
event 4
15
*new_table->m_f = NULL; /* { dg-warning "dereference of possibly-NULL '<unknown>'" } */ // FIXME: something better than "unknown" here
^
|
(4) ‘<unknown>’ could be NULL: unchecked value from (3)