https://gcc.gnu.org/bugzilla/show_bug.cgi?id=101386
--- Comment #1 from David Malcolm <dmalcolm at gcc dot gnu.org> --- Thanks for filing this bug. The: __attribute__((malloc, malloc(string_delete))) is confusing the analyzer; if I remove it, the code compiles without warnings. I'm not yet sure what the analyzer should do about situations like this.