Bug path

test_10
‘test_10’: events 1-5
101 void *ptr = malloc (1024);
^~~~~~~~~~~~~
|
(1) allocated here
[...]
104 for (i = 0; i < 1024; i++)
~~~~~~~~
|
(2) following ‘true’ branch (when ‘i <= 1023’)...
105 foo ();
~~~~~~
|
(3) ...to here
106
107 free (ptr);
~~~~~~~~~~
|
(4) first ‘free’ here
108 free (ptr); /* { dg-warning "double-'free' of 'ptr'" } */
~~~~~~~~~~
|
(5) second ‘free’ here; first ‘free’ was at (4)