scan-build report "Dereference of null pointer" for function wildcmp

[cyyever]

The detail analysis is in my uploaded screenshot image. I think this is not a false positive,please check it .

[onqtam]

Well that function is basically taken from here - its been around for almost 20 years and I don't see reports of crashes/null derefs.

I also tried to come up with a scenario where it would fail but couldn't - traced the logic a bunch of times.

I think what the analyzer thinks is that we can get to str = cp++; without ever having gotten to initializing it (cp = str + 1;) but I don't think that is possible.

So I'm closing this as a false positive - until someone comes up with a test case where this crashes.