The problem is splint's annotations aren't precise enough to specify
realloc adequately. If realloc returns null, the ownership of the
parameter should not change; if realloc returns non-null the ownership of
the parameter is transferred to the return value. So, splint thinks the
result of real
I have the following structure definition:
<<<
struct freecell_solver_append_string_struct
{
/*@null@*/ /*@reldef@*/ /*@owned@*/ char * buffer;
/*@reldef@*/ /*@dependent@*/ char * end_of_buffer;
size_t max_size;
int size_of_margin;
};
typedef struct freecell_solver_append_string
