https://gcc.gnu.org/bugzilla/show_bug.cgi?id=107582

--- Comment #5 from David Malcolm <dmalcolm at gcc dot gnu.org> ---
It's a bug in feasibility-checking when jumping through a function pointer:
dynamic_call_info_t::update_model blindly copies over the state from the
exploded_node's state, overwriting the precise knowledge of "ret" (which was
known to be == 110) with the UNKNOWN svalue.

Reply via email to