Bug path

‘test_40’: events 1-2
461 int *p = (int*)malloc(sizeof(int*));
^~~~~~~~~~~~~~~~~~~~
|
(1) this call could return NULL
462 i = *p; /* { dg-warning "dereference of possibly-NULL 'p'" } */
~~~~~~
|
(2) ‘p’ could be NULL: unchecked value from (1)