https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105285
David Malcolm <dmalcolm at gcc dot gnu.org> changed: What |Removed |Added ---------------------------------------------------------------------------- Last reconfirmed| |2022-04-27 Ever confirmed|0 |1 Status|UNCONFIRMED |ASSIGNED --- Comment #8 from David Malcolm <dmalcolm at gcc dot gnu.org> --- Minimal reproducer for (a): #include "analyzer-decls.h" void external_fn(void); struct st { char *name; unsigned size; }; void test (void *p, unsigned next_off) { struct st *r = p; external_fn(); if (next_off >= r->size) return; if (next_off >= r->size) /* We should have already returned if this is the case. */ __analyzer_dump_path (); /* { dg-bogus "path" } */ } I'm working on a fix.