Bug path

‘test_41’: event 1
472 if (flag) {
^
|
(1) following ‘false’ branch (when ‘flag == 0’)...
‘test_41’: event 2
475 buffer = NULL;
^
|
(2) ...to here
‘test_41’: events 3-5
475 buffer = NULL;
^
|
(3) ‘buffer’ is NULL
[...]
478 buffer[0] = 'a'; /* { dg-warning "dereference of possibly-NULL 'buffer'" "possibly-NULL" } */
~~~~~~~~~~~~~~~
|
(5) dereference of NULL ‘buffer’
[...]
481 return buffer;
~~~~~~
|
(4) ‘buffer’ is NULL