Bug path

test_41
‘test_41’: event 1
473 if (flag) {
^
|
(1) following ‘false’ branch (when ‘flag == 0’)...
‘test_41’: event 2
476 buffer = NULL;
^
|
(2) ...to here
‘test_41’: events 3-5
476 buffer = NULL;
^
|
(3) ‘buffer’ is NULL
[...]
479 buffer[0] = 'a'; /* { dg-warning "dereference of possibly-NULL 'buffer'" "possibly-NULL" } */
~~~~~~~~~~~~~~~
|
(5) dereference of NULL ‘buffer’
[...]
482 return buffer;
~~~~~~
|
(4) ‘buffer’ is NULL