Bug path

x7
‘x7’: events 1-2
6 int **md = calloc (1, 1);
^~~~~~~~~~~~~
|
(1) this call could return NULL
7
8 return md[0][0]; /* { dg-warning "possibly-NULL" "unchecked deref" } */
~~~~~
|
(2) ‘md’ could be NULL: unchecked value from (1)