https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106582
--- Comment #7 from Andrew Pinski <pinskia at gcc dot gnu.org> --- It is address 12, that is offset 12 from address 0. And yes there is a path where pQueryChunk can still be null pointer. If pPage->dwOptions & (0x20000000) is false and (pQuery is nulll or *pQuery != '?'), pQueryChunk can be a null pointer when pParser it true.