((char*)&((char*)((char*)*$unknown_579414)[24])[12])[24]' = ((char*)&((char*)((char*)*$unknown_579414)[24])[12])[24] - 1
((char*)&((char*)*$unknown_579414)[24])[20]' = ((char*)&((char*)*$unknown_579414)[24])[20] - 1
((char*)$unknown_579414)[4]' = 0
pvmmboxclasses->mc_rlink' = &$heap_69537
((char*)*$unknown_579414)[24]' = &freepmsgs.m_link
((char*)*$unknown_579414)[4]' = *$unknown_579414
pvmmboxclasses->mc_rlink->mc_link' = &$heap_69537
*$unknown_579414' = 0
*$unknown_579414' is freed
cind' = 0
dind' = 0
ep' = *$unknown_579414
ep2' = 0
errno' != 0
freepmsgs.m_rlink' = ((char*)$unknown_579414)[24]
$heap_69537' = pvmmboxclasses
bytes_after(&$heap_69537)' = 16
$heap_69537' is allocated by malloc
$heap_69537' is allocated
bytes_before(&$heap_69537)' = 0
((char*)&$heap_69537)[4]' = pvmmboxclasses->mc_rlink
((char*)&$heap_69537)[8]' = &$heap_69538
((char*)&$heap_69537)[12]' = &$heap_69539
$heap_69538' = *name
bytes_after(&$heap_69538)' = strlen(name) + 1
$heap_69538' is allocated by malloc
$heap_69538' is allocated
bytes_before(&$heap_69538)' = 0
strlen(&$heap_69538)' = strlen(name)
tocttou($heap_69538)' = tocttou(*name)
bytes_after(&$heap_69539)' = 28
$heap_69539' is allocated by malloc
$heap_69539' is allocated
bytes_before(&$heap_69539)' = 0
((char*)&$heap_69539)[16]' = 0
((char*)&$heap_69539)[20]' = 0
((char*)&$heap_69539)[24]' = 0
((char*)&$heap_69539)[8]' = -1
((char*)&$heap_69539)[12]' = 0
np' = &$heap_69537
numpmsgs' = numpmsgs + 1