Bug path

test_3a
‘test_3a’: events 1-2
39 int *ptr = (int *)__builtin_malloc (sizeof (int));
^~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
|
(1) this call could return NULL
40 *ptr = 42; /* { dg-warning "dereference of possibly-NULL 'ptr'" } */
~~~~~~~~~
|
(2) ‘ptr’ could be NULL: unchecked value from (1)