Bug path

‘test’: events 1-4

8	void p = malloc (1024); / { dg-message "\\(1\\) allocated here" } */
	^~~~~~~~~~~~~
	\|
	(1) allocated here
[...]
12	if (!q) /* { dg-message "\\(2\\) following 'true' branch \\(when 'q' is NULL\\)\\.\\.\\." } */
	~
	\|
	(2) following ‘true’ branch (when ‘q’ is NULL)...
13	{
14	free (q); /* { dg-message "\\(3\\) \\.\\.\\.to here" } */
	~~~~~~~~
	\|
	(3) ...to here
15	return; /* { dg-warning "leak of 'p'" "warning" } */
	~~~~~~
	\|
	(4) ‘p’ leaks here; was allocated at (1)