| 6 | char *buffer = (char*)malloc(256); |
| ^~~~~~~~~~~ |
| | |
| (1) this call could return NULL |
| 7 | |
| 8 | for (i=0; i<255; i++) { |
| ~~~~~ |
| | |
| (2) following ‘true’ branch (when ‘i <= 254’)... |
| 9 | buffer[i] = c; /* { dg-warning "use after 'free' of 'buffer'" "use after free" { xfail *-*-* } } */ |
| ~~~~~~~~~~~~~ |
| | | |
| | (4) ‘<unknown>’ could be NULL: unchecked value from (1) |
| (3) ...to here |