<?xml version="1.0" encoding="UTF-8"?>
<report xsi:noNamespaceSchemaLocation="http://samate.nist.gov/SATE2010/resources/sate_2010.xsd" tool_name="Goanna" tool_version="2.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
 <weakness id="1">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="28" path="chrome-5.0.375.70/gpu/command_buffer/common/gles2_cmd_format.cc">
   <explanation>
   function or method: gpu::gles2::GetCommandName
   line-by-line trace: 18,26,(27,take the True branch),(27,take the True branch),(28,reference to variable `index')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `names' with subscript interval [0,435] may be out of array bounds [0,179]
   </textoutput>
  </output>
 </weakness>
 <weakness id="2">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="1350" path="chrome-5.0.375.70/net/disk_cache/backend_impl.cc">
   <explanation>
   function or method: disk_cache::BackendImpl::OpenFollowingEntry
   line-by-line trace: (1295,take the False branch),(1298,take the True branch),(1299,take the True branch),1300,1302,1303,1304,1305,1304,1306,(1308,take the False branch),(1324,take the False branch),1337,1338,1339,(1340,take the True branch),(1341,take the True branch),1342,(1343,take the False branch),(1348,take the True branch),1349,(1350,reference to variable `oldest')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `access_times' with subscript interval [-1,2] may be out of array bounds [0,2]
   </textoutput>
  </output>
 </weakness>
 <weakness id="3">
  <name>
   ARR-inv-index
  </name>
  <location line="180" path="chrome-5.0.375.70/third_party/libxslt/libxslt/numbers.c">
   <explanation>
   function or method: xsltNumberFormatDecimal
   line-by-line trace: 172,173,174,175,176,177,(180,sizeof `temp_string')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `temp_string' with subscript interval [500,500] is out of array bounds [0,499]
   </textoutput>
  </output>
 </weakness>
 <weakness id="4">
  <name>
   ARR-inv-index
  </name>
  <location line="241" path="chrome-5.0.375.70/third_party/libxslt/libxslt/numbers.c">
   <explanation>
   function or method: xsltNumberFormatAlpha
   line-by-line trace: 234,235,236,237,238,(241,sizeof `temp_string')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `temp_string' with subscript interval [65,65] is out of array bounds [0,64]
   </textoutput>
  </output>
 </weakness>
 <weakness id="5">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="248" path="chrome-5.0.375.70/v8/src/debug-agent.cc">
   <explanation>
   function or method: v8::internal::DebuggerAgentUtil::ReceiveMessage
   line-by-line trace: 214,217,(218,take the True branch),219,220,221,222,223,(226,take the False branch),(226,take the False branch),(241,take the False branch),246,247,(248,subtraction of of `header_buffer_position' and 2)
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `header_buffer' with subscript interval [-2,78] may be out of array bounds [0,79]
   </textoutput>
  </output>
 </weakness>
 <weakness id="6">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="4225" path="chrome-5.0.375.70/v8/src/jsregexp.cc">
   <explanation>
   function or method: v8::internal::AddUncanonicals
   line-by-line trace: 4181,4192,4196,4197,4198,(4203,take the True branch),(4203,take the False branch),(4206,take the False branch),(4214,take the False branch),(4224,take the True branch),(4225,take the True branch),(4225,addition of `i' and 1)
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `boundaries' with subscript interval [3,18] may be out of array bounds [0,17]
   </textoutput>
  </output>
 </weakness>
 <weakness id="7">
  <name>
   ARR-inv-index
  </name>
  <location line="1382" path="chrome-5.0.375.70/v8/src/spaces.cc">
   <explanation>
   function or method: v8::internal::ReportCodeKindStatistics
   line-by-line trace: 1366,1372,2628,(1372,take the True branch),1373,(1382,integer constant 8)
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `table' with subscript interval [8,8] is out of array bounds [0,7]
   </textoutput>
  </output>
 </weakness>
 <weakness id="8">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="28" path="chrome-5.0.375.70/gpu/command_buffer/common/gles2_cmd_format.cc">
   <explanation>
   function or method: gpu::gles2::GetCommandName
   line-by-line trace: 18,26,(27,take the True branch),(27,take the True branch),(28,reference to variable `index')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `names' with subscript interval [0,435] may be out of array bounds [0,179]
   </textoutput>
  </output>
 </weakness>
 <weakness id="9">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="1350" path="chrome-5.0.375.70/net/disk_cache/backend_impl.cc">
   <explanation>
   function or method: disk_cache::BackendImpl::OpenFollowingEntry
   line-by-line trace: (1295,take the False branch),(1298,take the True branch),(1299,take the True branch),1300,1302,1303,1304,1305,1304,1306,(1308,take the False branch),(1324,take the False branch),1337,1338,1339,(1340,take the True branch),(1341,take the True branch),1342,(1343,take the False branch),(1348,take the True branch),1349,(1350,reference to variable `oldest')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `access_times' with subscript interval [-1,2] may be out of array bounds [0,2]
   </textoutput>
  </output>
 </weakness>
 <weakness id="10">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="248" path="chrome-5.0.375.70/v8/src/debug-agent.cc">
   <explanation>
   function or method: v8::internal::DebuggerAgentUtil::ReceiveMessage
   line-by-line trace: 214,217,(218,take the True branch),219,220,221,222,223,(226,take the False branch),(226,take the False branch),(241,take the False branch),246,247,(248,subtraction of of `header_buffer_position' and 2)
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `header_buffer' with subscript interval [-2,78] may be out of array bounds [0,79]
   </textoutput>
  </output>
 </weakness>
 <weakness id="11">
  <name>
   ARR-inv-index-pos
  </name>
  <location line="4225" path="chrome-5.0.375.70/v8/src/jsregexp.cc">
   <explanation>
   function or method: v8::internal::AddUncanonicals
   line-by-line trace: 4181,4192,4196,4197,4198,(4203,take the True branch),(4203,take the False branch),(4206,take the False branch),(4214,take the False branch),(4224,take the True branch),(4225,take the True branch),(4225,addition of `i' and 1)
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Array variable `boundaries' with subscript interval [3,18] may be out of array bounds [0,17]
   </textoutput>
  </output>
 </weakness>
 <weakness id="12">
  <name>
   ATH-cmp-unsign-pos
  </name>
  <location line="59" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/custom/V8SQLResultSetRowListCustom.cpp">
   <explanation>
   function or method: WebCore::V8SQLResultSetRowList::itemCallback
   line-by-line trace: (46,take the False branch),(51,take the False branch),56,58,(59,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `index' is unsigned and checked to be positive
   </textoutput>
  </output>
 </weakness>
 <weakness id="13">
  <name>
   ATH-cmp-unsign-pos
  </name>
  <location line="53" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/AutoFillPopupMenuClient.cpp">
   <explanation>
   function or method: WebKit::AutoFillPopupMenuClient::getSuggestion
   line-by-line trace: (53,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `listIndex' is unsigned and checked to be positive
   </textoutput>
  </output>
 </weakness>
 <weakness id="14">
  <name>
   ATH-cmp-unsign-pos
  </name>
  <location line="60" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/AutoFillPopupMenuClient.cpp">
   <explanation>
   function or method: WebKit::AutoFillPopupMenuClient::removeSuggestionAtIndex
   line-by-line trace: (60,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `listIndex' is unsigned and checked to be positive
   </textoutput>
  </output>
 </weakness>
 <weakness id="15">
  <name>
   ATH-cmp-unsign-pos
  </name>
  <location line="67" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/AutoFillPopupMenuClient.cpp">
   <explanation>
   function or method: WebKit::AutoFillPopupMenuClient::valueChanged
   line-by-line trace: (67,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `listIndex' is unsigned and checked to be positive
   </textoutput>
  </output>
 </weakness>
 <weakness id="16">
  <name>
   ATH-cmp-unsign-pos
  </name>
  <location line="49" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/AutocompletePopupMenuClient.cpp">
   <explanation>
   function or method: WebKit::AutocompletePopupMenuClient::getSuggestion
   line-by-line trace: (49,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `listIndex' is unsigned and checked to be positive
   </textoutput>
  </output>
 </weakness>
 <weakness id="17">
  <name>
   ATH-cmp-unsign-pos
  </name>
  <location line="55" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/AutocompletePopupMenuClient.cpp">
   <explanation>
   function or method: WebKit::AutocompletePopupMenuClient::removeSuggestionAtIndex
   line-by-line trace: (55,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `listIndex' is unsigned and checked to be positive
   </textoutput>
  </output>
 </weakness>
 <weakness id="18">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="601" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/AutoTableLayout.cpp">
   <explanation>
   function or method: WebCore::AutoTableLayout::layout
   line-by-line trace: 499,500,501,(503,take the False branch),(508,take the True branch),509,511,512,(513,write of variable `totalRelative'),514,515,516,517,518,519,520,(523,take the False branch),(558,take the True branch),(558,take the True branch),(559,take the False branch),(567,take the False branch),(585,take the True branch),(586,take the False branch),(596,take the True branch),(597,take the True branch),598,(599,take the True branch),(599,take the True branch),(601,divide of variable `totalRelative')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalRelative' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="19">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="642" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/AutoTableLayout.cpp">
   <explanation>
   function or method: WebCore::AutoTableLayout::layout
   line-by-line trace: 499,500,501,(503,take the False branch),(508,take the True branch),509,511,512,513,514,515,516,517,(518,write of variable `totalPercent'),519,520,(523,take the False branch),(558,take the True branch),(558,take the True branch),(559,take the False branch),(567,take the False branch),(585,take the True branch),(586,take the False branch),(596,take the True branch),(597,take the False branch),(609,take the False branch),(623,take the False branch),(637,take the True branch),(637,take the True branch),(637,take the True branch),(639,take the True branch),640,(641,take the True branch),(642,divide of variable `totalPercent')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalPercent' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="20">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="295" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/FixedTableLayout.cpp">
   <explanation>
   function or method: WebCore::FixedTableLayout::layout
   line-by-line trace: 233,234,235,237,(238,write of variable `autoSpan'),239,240,241,(247,take the False branch),261,262,(263,take the False branch),(263,take the False branch),290,291,(292,take the True branch),(293,take the True branch),294,(295,divide of variable `autoSpan')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `autoSpan' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="21">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="247" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,(205,write of variable `totalFixed'),206,207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the True branch),(246,take the True branch),(247,divide of variable `totalFixed')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalFixed' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="22">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="263" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,205,(206,write of variable `totalPercent'),207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the False branch),(258,take the True branch),259,(261,take the True branch),(262,take the True branch),(263,divide of variable `totalPercent')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalPercent' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="23">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="278" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),(204,write of variable `totalRelative'),205,206,207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the False branch),(258,take the False branch),268,(272,take the True branch),273,274,(276,take the True branch),(277,take the True branch),(278,divide of variable `totalRelative')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalRelative' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="24">
  <name>
   ATH-div-0-bef-cmp
  </name>
  <location line="301" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,205,(206,write of variable `totalPercent'),207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the False branch),(258,take the True branch),259,(261,take the True branch),(262,take the True branch),(263,divide of variable `totalPercent'),264,(261,take the False branch),(272,take the False branch),(296,take the True branch),(301,take the True branch),(301,cmp_nonnull_aux of variable `totalPercent')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalPercent' is used as a divisor, then compared to be not 0
   </textoutput>
  </output>
 </weakness>
 <weakness id="25">
  <name>
   ATH-div-0-bef-cmp
  </name>
  <location line="312" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,(205,write of variable `totalFixed'),206,207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the True branch),(246,take the True branch),(247,divide of variable `totalFixed'),248,(245,take the False branch),(258,take the False branch),268,(272,take the False branch),(296,take the True branch),(301,take the True branch),(301,take the False branch),(312,cmp_nonnull_aux of variable `totalFixed')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalFixed' is used as a divisor, then compared to be not 0
   </textoutput>
  </output>
 </weakness>
 <weakness id="26">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="182" path="chrome-5.0.375.70/v8/src/mark-compact.cc">
   <explanation>
   function or method: v8::internal::MarkCompactCollector::Finish
   line-by-line trace: (152,take the False branch),153,159,161,(165,take the False branch),170,171,172,(173,write of variable `old_gen_used'),175,(176,take the False branch),181,(182,divide of variable `old_gen_used')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `old_gen_used' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="27">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="601" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/AutoTableLayout.cpp">
   <explanation>
   function or method: WebCore::AutoTableLayout::layout
   line-by-line trace: 499,500,501,(503,take the False branch),(508,take the True branch),509,511,512,(513,write of variable `totalRelative'),514,515,516,517,518,519,520,(523,take the False branch),(558,take the True branch),(558,take the True branch),(559,take the False branch),(567,take the False branch),(585,take the True branch),(586,take the False branch),(596,take the True branch),(597,take the True branch),598,(599,take the True branch),(599,take the True branch),(601,divide of variable `totalRelative')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalRelative' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="28">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="642" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/AutoTableLayout.cpp">
   <explanation>
   function or method: WebCore::AutoTableLayout::layout
   line-by-line trace: 499,500,501,(503,take the False branch),(508,take the True branch),509,511,512,513,514,515,516,517,(518,write of variable `totalPercent'),519,520,(523,take the False branch),(558,take the True branch),(558,take the True branch),(559,take the False branch),(567,take the False branch),(585,take the True branch),(586,take the False branch),(596,take the True branch),(597,take the False branch),(609,take the False branch),(623,take the False branch),(637,take the True branch),(637,take the True branch),(637,take the True branch),(639,take the True branch),640,(641,take the True branch),(642,divide of variable `totalPercent')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalPercent' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="29">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="295" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/FixedTableLayout.cpp">
   <explanation>
   function or method: WebCore::FixedTableLayout::layout
   line-by-line trace: 233,234,235,237,(238,write of variable `autoSpan'),239,240,241,(247,take the False branch),261,262,(263,take the False branch),(263,take the False branch),290,291,(292,take the True branch),(293,take the True branch),294,(295,divide of variable `autoSpan')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `autoSpan' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="30">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="247" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,(205,write of variable `totalFixed'),206,207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the True branch),(246,take the True branch),(247,divide of variable `totalFixed')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalFixed' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="31">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="263" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,205,(206,write of variable `totalPercent'),207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the False branch),(258,take the True branch),259,(261,take the True branch),(262,take the True branch),(263,divide of variable `totalPercent')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalPercent' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="32">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="278" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),(204,write of variable `totalRelative'),205,206,207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the False branch),(258,take the False branch),268,(272,take the True branch),273,274,(276,take the True branch),(277,take the True branch),(278,divide of variable `totalRelative')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalRelative' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="33">
  <name>
   ATH-div-0-aft-assign
  </name>
  <location line="182" path="chrome-5.0.375.70/v8/src/mark-compact.cc">
   <explanation>
   function or method: v8::internal::MarkCompactCollector::Finish
   line-by-line trace: (152,take the False branch),153,159,161,(165,take the False branch),170,171,172,(173,write of variable `old_gen_used'),175,(176,take the False branch),181,(182,divide of variable `old_gen_used')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `old_gen_used' is set to 0, then used as a divisor
   </textoutput>
  </output>
 </weakness>
 <weakness id="34">
  <name>
   ATH-div-0-bef-cmp
  </name>
  <location line="301" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,205,(206,write of variable `totalPercent'),207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the False branch),(258,take the True branch),259,(261,take the True branch),(262,take the True branch),(263,divide of variable `totalPercent'),264,(261,take the False branch),(272,take the False branch),(296,take the True branch),(301,take the True branch),(301,cmp_nonnull_aux of variable `totalPercent')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalPercent' is used as a divisor, then compared to be not 0
   </textoutput>
  </output>
 </weakness>
 <weakness id="35">
  <name>
   ATH-div-0-bef-cmp
  </name>
  <location line="312" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFrameSet.cpp">
   <explanation>
   function or method: WebCore::RenderFrameSet::layOutAxis
   line-by-line trace: 192,194,(196,take the False branch),201,(202,take the False branch),204,(205,write of variable `totalFixed'),206,207,208,209,(213,take the False branch),238,(242,take the True branch),243,(245,take the True branch),(246,take the True branch),(247,divide of variable `totalFixed'),248,(245,take the False branch),(258,take the False branch),268,(272,take the False branch),(296,take the True branch),(301,take the True branch),(301,take the False branch),(312,cmp_nonnull_aux of variable `totalFixed')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `totalFixed' is used as a divisor, then compared to be not 0
   </textoutput>
  </output>
 </weakness>
 <weakness id="36">
  <name>
   ATH-inc-bool
  </name>
  <location line="78" path="chrome-5.0.375.70/chrome/browser/renderer_host/render_sandbox_host_linux.cc">
   <explanation>
   function or method: SandboxIPCProcess::Run
   line-by-line trace: 67,68,69,70,71,73,74,(75,take the True branch),(75,take the False branch),(76,take the True branch),77,(78,`failed_polls')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Deprecated operation on bool `failed_polls'
   </textoutput>
  </output>
 </weakness>
 <weakness id="37">
  <name>
   ATH-neg-check-nonneg
  </name>
  <location line="576" path="chrome-5.0.375.70/chrome/browser/automation/automation_provider.cc">
   <explanation>
   function or method: AutomationProvider::ActivateTab
   line-by-line trace: (576,positive_check_non_strict of variable `at_index'),578
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `at_index' is checked to be negative when known or assumed to be nonnegative
   </textoutput>
  </output>
 </weakness>
 <weakness id="38">
  <name>
   ATH-neg-check-nonneg
  </name>
  <location line="39" path="chrome-5.0.375.70/skia/ext/image_operations.cc">
   <explanation>
   function or method: skia::_GLOBAL__N__19_image_operations_cc_7862c06d::EvalBox
   line-by-line trace: (39,positive_check_branch_non_strict of variable `x'),(39,positive_check_non_strict of variable `x'),(39,negative_check_branch of variable `x')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `x' is checked to be negative when known or assumed to be nonnegative
   </textoutput>
  </output>
 </weakness>
 <weakness id="39">
  <name>
   ATH-neg-check-nonneg
  </name>
  <location line="4634" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNodeTrailingSorted
   line-by-line trace: (4634,positive_check_non_strict of variable `i'),(4634,positive_check_branch_non_strict of variable `i'),(4634,take the True branch),(4635,take the False branch),4637,(4633,write of variable `i'),(4633,positive_check_non_strict of variable `i'),(4637,negative_check_branch of variable `i'),4639,4640
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `i' is checked to be negative when known or assumed to be nonnegative
   </textoutput>
  </output>
 </weakness>
 <weakness id="40">
  <name>
   ATH-sizeof-by-sizeof
  </name>
  <location line="677" path="chrome-5.0.375.70/net/base/net_util.cc">
   <explanation>
   function or method: _GLOBAL__N__11_net_util_cc_8d2416c1::IDNToUnicodeOneComponent
   line-by-line trace: (670,take the False branch),(671,take the False branch),675,(676,take the True branch),(677,multiplication of sizeof a deref of a function call to function `_Z15ArraySizeHelperItLj4EERAT0__cRAT0__KT_' and sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Multiplied sizeof by sizeof. Did you mean to divide?
   </textoutput>
  </output>
 </weakness>
 <weakness id="41">
  <name>
   ATH-sizeof-by-sizeof
  </name>
  <location line="3817" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::parse_defcpdtable
   line-by-line trace: (3760,take the False branch),3764,3765,3766,3767,3768,(3769,take the False branch),(3790,take the False branch),3796,(3797,take the True branch),(3798,take the False branch),3799,3800,3801,3802,3803,(3804,take the True branch),(3805,take the True branch),3806,3815,(3816,take the True branch),(3817,multiplication of sizeof `piece' and sizeof a integer)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Multiplied sizeof by sizeof. Did you mean to divide?
   </textoutput>
  </output>
 </weakness>
 <weakness id="42">
  <name>
   COP-assign-op-ret
  </name>
  <location line="50" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/text/SegmentedString.cpp">
   <explanation>
   function or method: WebCore::SegmentedString::operator=
   line-by-line trace: 39,40,41,42,43,(44,take the False branch),(46,take the False branch),49,(50,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="43">
  <name>
   COP-assign-op-ret
  </name>
  <location line="452" path="chrome-5.0.375.70/third_party/icu/source/common/unistr.cpp">
   <explanation>
   function or method: icu_4_2::UnicodeString::operator=
   line-by-line trace: (452,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="44">
  <name>
   COP-assign-op-ret
  </name>
  <location line="196" path="chrome-5.0.375.70/third_party/icu/source/i18n/choicfmt.cpp">
   <explanation>
   function or method: icu_4_2::ChoiceFormat::operator=
   line-by-line trace: (162,take the False branch),(196,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="45">
  <name>
   COP-assign-op-ret
  </name>
  <location line="503" path="chrome-5.0.375.70/third_party/icu/source/i18n/coleitr.cpp">
   <explanation>
   function or method: icu_4_2::CollationElementIterator::operator=
   line-by-line trace: (393,take the False branch),(503,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="46">
  <name>
   COP-assign-op-ret
  </name>
  <location line="485" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::operator=
   line-by-line trace: 459,(458,take the False branch),(485,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="47">
  <name>
   COP-assign-op-ret
  </name>
  <location line="150" path="chrome-5.0.375.70/third_party/icu/source/i18n/sortkey.cpp">
   <explanation>
   function or method: icu_4_2::CollationKey::operator=
   line-by-line trace: (146,take the True branch),(148,take the True branch),(150,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="48">
  <name>
   COP-assign-op-ret
  </name>
  <location line="159" path="chrome-5.0.375.70/third_party/icu/source/i18n/sortkey.cpp">
   <explanation>
   function or method: icu_4_2::CollationKey::operator=
   line-by-line trace: (146,take the True branch),(148,take the False branch),(153,take the True branch),155,(157,take the True branch),(159,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="49">
  <name>
   COP-assign-op-ret
  </name>
  <location line="173" path="chrome-5.0.375.70/third_party/icu/source/i18n/sortkey.cpp">
   <explanation>
   function or method: icu_4_2::CollationKey::operator=
   line-by-line trace: (146,take the False branch),(173,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="50">
  <name>
   COP-assign-op-ret
  </name>
  <location line="39" path="chrome-5.0.375.70/webkit/glue/webcursor.cc">
   <explanation>
   function or method: WebCursor::operator=
   line-by-line trace: (38,take the True branch),(39,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="51">
  <name>
   COP-assign-op-ret
  </name>
  <location line="43" path="chrome-5.0.375.70/webkit/glue/webcursor.cc">
   <explanation>
   function or method: WebCursor::operator=
   line-by-line trace: (38,take the False branch),41,42,(43,a return statement)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Assignment operator doesn't return a non-const reference to this
   </textoutput>
  </output>
 </weakness>
 <weakness id="52">
  <name>
   CPU-ctor-call-virt
  </name>
  <location line="530" path="chrome-5.0.375.70/chrome/browser/task_manager_resource_providers.cc">
   <explanation>
   function or method: TaskManagerExtensionProcessResource::TaskManagerExtensionProcessResource
   line-by-line trace: 521,(524,take the False branch),528,529,(530,a field of a function call to a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `TaskManagerExtensionProcessResource::GetExtension' is called in a constructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="53">
  <name>
   CPU-ctor-call-virt
  </name>
  <location line="52" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderScrollbar.cpp">
   <explanation>
   function or method: WebCore::RenderScrollbar::RenderScrollbar
   line-by-line trace: 39,46,68,46,47,68,47,(48,take the False branch),51,(52,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `WebCore::Scrollbar::setFrameRect' is called in a constructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="54">
  <name>
   CPU-ctor-call-virt
  </name>
  <location line="225" path="chrome-5.0.375.70/third_party/icu/source/common/dictbe.cpp">
   <explanation>
   function or method: icu_4_2::ThaiBreakEngine::ThaiBreakEngine
   line-by-line trace: 219,220,219,223,(224,take the True branch),(225,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `icu_4_2::DictionaryBreakEngine::setCharacters' is called in a constructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="55">
  <name>
   CPU-ctor-call-virt
  </name>
  <location line="451" path="chrome-5.0.375.70/third_party/icu/source/common/dictbe.cpp">
   <explanation>
   function or method: icu_4_2::CjkBreakEngine::CjkBreakEngine
   line-by-line trace: 435,436,435,(437,take the False branch),443,444,445,446,(448,take the True branch),(450,take the True branch),(451,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `icu_4_2::DictionaryBreakEngine::setCharacters' is called in a constructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="56">
  <name>
   CPU-ctor-call-virt
  </name>
  <location line="458" path="chrome-5.0.375.70/third_party/icu/source/common/dictbe.cpp">
   <explanation>
   function or method: icu_4_2::CjkBreakEngine::CjkBreakEngine
   line-by-line trace: 435,436,435,(437,take the False branch),443,444,445,446,(448,take the True branch),(450,take the False branch),453,454,455,456,457,(458,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `icu_4_2::DictionaryBreakEngine::setCharacters' is called in a constructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="57">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="145" path="chrome-5.0.375.70/chrome/browser/sessions/session_service.cc">
   <explanation>
   function or method: SessionService::~SessionService
   line-by-line trace: 144,(145,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `BaseSessionService::Save' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="58">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="26" path="chrome-5.0.375.70/media/filters/null_audio_renderer.cc">
   <explanation>
   function or method: media::NullAudioRenderer::~NullAudioRenderer
   line-by-line trace: 25,(26,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `media::AudioRendererBase::Stop' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="59">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="99" path="chrome-5.0.375.70/net/url_request/url_request_http_job.cc">
   <explanation>
   function or method: URLRequestHttpJob::~URLRequestHttpJob
   line-by-line trace: 97,(98,take the True branch),(98,take the True branch),(99,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `URLRequestHttpJob::IsCachedContent' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="60">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="75" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityObject.cpp">
   <explanation>
   function or method: WebCore::AccessibilityObject::~AccessibilityObject
   line-by-line trace: 73,(75,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `WebCore::AccessibilityObject::isDetached' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="61">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="101" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityRenderObject.cpp">
   <explanation>
   function or method: WebCore::AccessibilityRenderObject::~AccessibilityRenderObject
   line-by-line trace: (101,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `WebCore::AccessibilityRenderObject::isDetached' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="62">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="179" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/SimpleFontData.cpp">
   <explanation>
   function or method: WebCore::SimpleFontData::~SimpleFontData
   line-by-line trace: 172,(175,take the False branch),(175,take the True branch),177,(179,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `WebCore::SimpleFontData::isCustomFont' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="63">
  <name>
   CPU-dtor-call-virt
  </name>
  <location line="64" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/diskcache.cc">
   <explanation>
   function or method: talk_base::DiskCacheAdapter::~DiskCacheAdapter
   line-by-line trace: 63,(64,a field of `this')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Virtual member function `talk_base::StreamAdapterInterface::Close' is called in a destructor
   </textoutput>
  </output>
 </weakness>
 <weakness id="64">
  <name>
   CPU-malloc-class
  </name>
  <location line="52" path="chrome-5.0.375.70/chrome/browser/safe_browsing/safe_browsing_util.cc">
   <explanation>
   function or method: SBEntry::Create
   line-by-line trace: 51,(52,function `malloc')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Class object pointer `SBEntry' is assigned an address alocated by malloc. The object constructor will not be called
   </textoutput>
  </output>
 </weakness>
 <weakness id="65">
  <name>
   CPU-nonvirt-dtor
  </name>
  <location line="81" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/diskcache.cc">
   <explanation>
   function or method: talk_base::DiskCache::~DiskCache
   line-by-line trace: 
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Non-virtual destructor in abstract class `talk_base::DiskCache'
   </textoutput>
  </output>
 </weakness>
 <weakness id="66">
  <name>
   EXP-dangling-else
  </name>
  <location line="649" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/GraphicsContext3D.cpp">
   <explanation>
   function or method: WebCore::GraphicsContext3DInternal::bindTexture
   line-by-line trace: (634,take the False branch),636,(642,take the True branch),(643,take the False branch),(649,a function call to a field of `texture')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Dangling else
   </textoutput>
  </output>
 </weakness>
 <weakness id="67">
  <name>
   MEM-delete-op
  </name>
  <location line="331" path="chrome-5.0.375.70/native_client/src/shared/npruntime/structure_translations.cc">
   <explanation>
   function or method: nacl::WireFormatToNPVariants
   line-by-line trace: (312,take the False branch),(316,take the False branch),(316,take the False branch),320,(321,take the True branch),322,(323,ptr_assign of variable `variants'),(324,take the False branch),(329,take the True branch),(330,take the True branch),(331,dealloc_not_delete_array of variable `variants')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `variants' is allocated with `new []' and freed with `delete'
   </textoutput>
  </output>
 </weakness>
 <weakness id="68">
  <name>
   MEM-delete-op
  </name>
  <location line="88" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/natsocketfactory.cc">
   <explanation>
   function or method: talk_base::NATSocket::SendInternal
   line-by-line trace: 83,(84,ptr_assign of variable `buf'),85,87,(88,dealloc_not_delete_array of variable `buf')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `buf' is allocated with `new []' and freed with `delete'
   </textoutput>
  </output>
 </weakness>
 <weakness id="69">
  <name>
   MEM-double-free
  </name>
  <location line="122" path="chrome-5.0.375.70/chrome/browser/memory_details_linux.cc">
   <explanation>
   function or method: GetProcesses
   line-by-line trace: 78,80,(81,take the False branch),84,(85,take the True branch),86,(89,take the True branch),(90,take the False branch),(90,take the True branch),91,92,(96,take the False branch),99,100,101,(102,take the False branch),(105,take the True branch),(105,take the False branch),(106,take the True branch),(106,take the False branch),(107,take the False branch),109,113,114,(115,take the False branch),118,119,120,121,(122,mem_free of variable `process_name'),123,(85,take the True branch),86,(89,take the True branch),(90,take the False branch),(90,take the True branch),91,92,(96,take the False branch),99,100,101,(102,take the False branch),(105,take the True branch),(105,take the False branch),(106,take the True branch),(106,take the False branch),(107,take the False branch),109,113,114,(115,take the False branch),118,119,120,121,(122,mem_free of variable `process_name')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Freeing memory location process_name more than once
   </textoutput>
  </output>
 </weakness>
 <weakness id="70">
  <name>
   MEM-double-free
  </name>
  <location line="3831" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::parse_defcpdtable
   line-by-line trace: (3760,take the False branch),3764,3765,3766,3767,3768,(3769,take the False branch),(3790,take the False branch),3796,(3797,take the True branch),(3798,take the False branch),3799,3800,3801,3802,3803,(3804,take the True branch),(3805,take the True branch),3806,3815,(3816,take the True branch),3817,3818,3819,3820,(3821,take the True branch),3822,(3823,take the True branch),(3823,take the True branch),(3823,take the False branch),(3824,take the False branch),(3825,take the True branch),(3826,take the False branch),(3826,take the False branch),(3828,take the True branch),3829,(3830,take the False branch),(3831,mem_free of variable `conv'),3833,(3821,take the True branch),3822,(3823,take the True branch),(3823,take the True branch),(3823,take the False branch),(3824,take the False branch),(3825,take the True branch),(3826,take the False branch),(3826,take the False branch),(3828,take the True branch),3829,(3830,take the False branch),(3831,mem_free of variable `conv')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Freeing memory location conv more than once
   </textoutput>
  </output>
 </weakness>
 <weakness id="71">
  <name>
   MEM-double-free
  </name>
  <location line="909" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/hunspell.cxx">
   <explanation>
   function or method: Hunspell::suggest
   line-by-line trace: (687,take the True branch),689,690,691,(692,take the False branch),(692,take the False branch),693,694,(696,take the False branch),699,(700,take the True branch),(701,take the False branch),705,706,707,(710,take the True branch),(711,take the True branch),(711,take the True branch),(714,take the False branch),715,716,718,719,720,721,827,(832,take the True branch),(833,take the False branch),(851,take the False branch),(851,take the True branch),(851,take the False branch),(885,take the True branch),886,887,888,(889,ptr_assign of variable `nlst'),890,891,(892,take the True branch),(892,take the False branch),(895,take the True branch),(895,take the True branch),(896,take the True branch),(897,take the True branch),898,(899,take the False branch),(909,take the True branch),(909,mem_free of variable `nlst'),910,(912,take the True branch),913,914,915,(917,take the True branch),(895,take the True branch),(895,take the True branch),(896,take the True branch),(897,take the True branch),898,(899,take the False branch),(909,take the True branch),(909,mem_free of variable `nlst')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Freeing memory location nlst more than once
   </textoutput>
  </output>
 </weakness>
 <weakness id="72">
  <name>
   MEM-double-free
  </name>
  <location line="109" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/firewallsocketserver.cc">
   <explanation>
   function or method: talk_base::FirewallSocket::Accept
   line-by-line trace: (105,ptr_assign of variable `sock'),(105,take the True branch),(106,take the False branch),108,(109,mem_free of variable `sock'),(105,take the True branch),(106,take the False branch),108,(109,mem_free of variable `sock')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Freeing memory location sock more than once
   </textoutput>
  </output>
 </weakness>
 <weakness id="73">
  <name>
   MEM-stack-global
  </name>
  <location line="325" path="chrome-5.0.375.70/v8/src/liveedit.cc">
   <explanation>
   function or method: v8::internal::LiveEdit::GatherCompileInfo
   line-by-line trace: 320,322,323,324,(325,assign_local_address of variable `active_function_info_listener'),326,327,328,330
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Store local address in global variable `active_function_info_listener'
   </textoutput>
  </output>
 </weakness>
 <weakness id="74">
  <name>
   MEM-stack-global
  </name>
  <location line="1478" path="chrome-5.0.375.70/v8/src/log.cc">
   <explanation>
   function or method: v8::internal::Logger::Setup
   line-by-line trace: (1406,take the True branch),1407,1408,1409,1410,1411,1412,1413,(1417,take the True branch),(1420,take the True branch),1421,1422,1425,1427,1426,(1425,take the False branch),(1425,take the False branch),(1425,take the False branch),(1426,take the False branch),(1426,take the False branch),(1426,take the False branch),(1426,take the False branch),(1427,take the True branch),1425,(1429,take the False branch),(1432,take the True branch),(1433,take the True branch),1434,(1478,assign_local_address of variable `current_state_'),1480,(1482,take the False branch),(1486,take the False branch),(1488,take the False branch),(1492,take the True branch),1493,(1496,take the False branch),1508,1510
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Store local address in global variable `current_state_'
   </textoutput>
  </output>
 </weakness>
 <weakness id="75">
  <name>
   MEM-stack-global
  </name>
  <location line="346" path="chrome-5.0.375.70/v8/src/top.cc">
   <explanation>
   function or method: v8::internal::Top::StackTrace
   line-by-line trace: (341,take the True branch),342,343,344,345,(346,assign_local_address of variable `incomplete_message'),347,348,349,350,351
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Store local address in global variable `incomplete_message'
   </textoutput>
  </output>
 </weakness>
 <weakness id="76">
  <name>
   MEM-stack-global
  </name>
  <location line="386" path="chrome-5.0.375.70/v8/src/top.cc">
   <explanation>
   function or method: v8::internal::Top::PrintStack
   line-by-line trace: (369,take the True branch),370,372,(373,take the False branch),376,379,(380,take the True branch),379,384,385,(386,assign_local_address of variable `incomplete_message'),387,388,389,390,391,(392,take the True branch),394,402
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Store local address in global variable `incomplete_message'
   </textoutput>
  </output>
 </weakness>
 <weakness id="77">
  <name>
   MEM-stack-param
  </name>
  <location line="4047" path="chrome-5.0.375.70/third_party/WebKit/WebCore/css/CSSParser.cpp">
   <explanation>
   function or method: WebCore::BorderImageParseContext::commitBorderImage
   line-by-line trace: (4008,take the False branch),(4013,take the True branch),4014,4015,(4017,take the False branch),4021,4022,4023,4024,4025,(4028,take the True branch),4029,(4032,take the True branch),4033,(4037,take the True branch),4038,4039,(4040,take the False branch),(4042,take the True branch),4043,(4044,take the False branch),4046,(4047,assign_local_address_at of variable `p'),4048,4049,4053
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Store stack address outside function via parameter `p'
   </textoutput>
  </output>
 </weakness>
 <weakness id="78">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="4044" path="chrome-5.0.375.70/base/third_party/dmg_fp/dtoa.cc">
   <explanation>
   function or method: dmg_fp::dtoa
   line-by-line trace: 3564,3565,3566,3567,3569,3570,3572,3573,3574,3575,(3594,take the True branch),3595,3596,3600,(3601,take the True branch),3603,3604,(3611,take the False branch),(3628,take the False branch),3647,(3651,take the True branch),3653,3654,3655,3683,3689,3703,3704,(3705,take the True branch),(3705,take the True branch),3706,3707,(3708,take the True branch),(3708,take the True branch),(3709,take the True branch),3710,3711,3713,(3714,take the True branch),3715,3716,(3722,take the True branch),3723,3724,3725,(3732,take the False branch),(3732,take the True branch),3733,3739,(3743,take the True branch),3744,3745,3747,3748,3750,3751,3752,3753,3754,3755,3772,3774,(3781,take the True branch),(3781,take the True branch),(3781,take the True branch),3785,3786,3787,3788,3789,(3790,take the True branch),3791,3792,(3793,take the True branch),3795,3796,3797,(3799,take the False branch),3804,(3814,take the True branch),(3814,take the True branch),(3814,take the True branch),(3815,take the True branch),3816,3876,3877,3878,3879,3880,(3885,take the True branch),(3885,take the False branch),3936,3937,(3938,write of variable `mhi'),(3939,take the False branch),(3953,take the True branch),(3953,take the True branch),(3954,take the True branch),3955,3956,3957,(3959,take the True branch),(3960,take the True branch),(3961,take the False branch),(3967,take the True branch),3968,3973,(3974,take the True branch),3975,3979,(3980,take the False branch),(3980,take the True branch),3987,(3985,take the True branch),(3985,take the True branch),(3987,take the True branch),3991,3992,3993,(4005,take the False branch),(4005,take the False branch),4013,4014,4015,4016,(4017,take the True branch),4018,(4019,take the True branch),4020,(4021,take the False branch),(4030,take the True branch),(4030,take the False branch),(4030,take the False branch),(4042,take the True branch),(4043,take the True branch),(4044,indirect_deref of variable `mhi')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `mhi' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="79">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="772" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimemagic.c">
   <explanation>
   function or method: _xdg_mime_magic_read_magic_file
   line-by-line trace: 756,(757,write of variable `match'),759,(761,take the True branch),763,771,(772,indirect_deref of variable `match')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `match' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="80">
  <name>
   PTR-null-assign
  </name>
  <location line="936" path="chrome-5.0.375.70/chrome/browser/browser_about_handler.cc">
   <explanation>
   function or method: WillHandleBrowserAboutURL
   line-by-line trace: (898,take the False branch),(904,take the False branch),(908,take the False branch),(915,take the False branch),(921,take the False branch),(927,take the False branch),(933,take the True branch),(935,write of variable `bad_pointer'),(936,deref of variable `bad_pointer')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `bad_pointer' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="81">
  <name>
   PTR-null-assign
  </name>
  <location line="163" path="chrome-5.0.375.70/chrome/browser/browser_main.cc">
   <explanation>
   function or method: _GLOBAL__N__15_browser_main_cc_d72c0a55::HandleTestParameters
   line-by-line trace: (156,take the False branch),(161,take the True branch),(162,write of variable `bad_pointer'),(163,deref of variable `bad_pointer')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `bad_pointer' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="82">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="375" path="chrome-5.0.375.70/chrome/browser/debugger/devtools_manager.cc">
   <explanation>
   function or method: DevToolsManager::CloseWindow
   line-by-line trace: (371,write of variable `inspected_rvh'),(372,take the False branch),373,(375,indirect_deref of variable `inspected_rvh')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `inspected_rvh' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="83">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="975" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_bar_gtk.cc">
   <explanation>
   function or method: BookmarkBarGtk::OnButtonPressed
   line-by-line trace: (971,take the True branch),(972,write of variable `node'),(973,take the False branch),(974,take the False branch),(975,indirect_deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `node' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="84">
  <name>
   PTR-null-assign
  </name>
  <location line="75" path="chrome-5.0.375.70/chrome/plugin/npobject_proxy.cc">
   <explanation>
   function or method: NPObjectProxy::Create
   line-by-line trace: 73,74,(73,write of variable `obj'),(75,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `obj' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="85">
  <name>
   PTR-null-assign
  </name>
  <location line="57" path="chrome-5.0.375.70/chrome/renderer/about_handler.cc">
   <explanation>
   function or method: AboutHandler::AboutCrash
   line-by-line trace: (56,write of variable `zero'),(57,deref of variable `zero')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `zero' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="86">
  <name>
   PTR-null-assign
  </name>
  <location line="42" path="chrome-5.0.375.70/chrome/renderer/nacl_desc_wrapper_chrome.cc">
   <explanation>
   function or method: nacl::DescWrapperFactory::ImportPepperSync
   line-by-line trace: 43,(44,write of variable `ss_desc'),45,(47,write of variable `ss_desc'),(49,take the False branch),(54,take the True branch),55,(56,write of variable `ss_desc'),57
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ss_desc' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="87">
  <name>
   PTR-null-assign
  </name>
  <location line="170" path="chrome-5.0.375.70/chrome/renderer/renderer_main.cc">
   <explanation>
   function or method: HandleRendererErrorTestParameters
   line-by-line trace: (154,take the False branch),(161,take the False branch),(168,take the True branch),(169,write of variable `bad_pointer'),(170,deref of variable `bad_pointer')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `bad_pointer' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="88">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="78" path="chrome-5.0.375.70/native_client/src/trusted/desc/nacl_desc_dir.c">
   <explanation>
   function or method: NaClDescDirDescMake
   line-by-line trace: 70,(72,write of variable `ndp'),(73,take the True branch),74,(78,indirect_deref of variable `ndp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `ndp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="89">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="96" path="chrome-5.0.375.70/native_client/src/trusted/desc/nacl_desc_dir.c">
   <explanation>
   function or method: NaClDescDirDescOpen
   line-by-line trace: 90,(92,write of variable `nhdp'),(93,take the True branch),94,(96,indirect_deref of variable `nhdp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `nhdp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="90">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="82" path="chrome-5.0.375.70/native_client/src/trusted/desc/nacl_desc_io.c">
   <explanation>
   function or method: NaClDescIoDescMake
   line-by-line trace: 74,(76,write of variable `ndp'),(77,take the True branch),78,(82,indirect_deref of variable `ndp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `ndp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="91">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="102" path="chrome-5.0.375.70/native_client/src/trusted/desc/nacl_desc_io.c">
   <explanation>
   function or method: NaClDescIoDescOpen
   line-by-line trace: 96,(98,write of variable `nhdp'),(99,take the True branch),100,(102,indirect_deref of variable `nhdp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `nhdp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="92">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="152" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/arch/x86_32/nacl_app_32.c">
   <explanation>
   function or method: NaClAppPrepareToLaunch
   line-by-line trace: 93,94,96,97,99,101,103,104,105,107,109,111,(112,take the False branch),117,119,(120,take the False branch),126,127,(145,take the True branch),(146,write of variable `nhdp'),(147,take the True branch),148,(152,take the True branch),(152,indirect_deref of variable `nhdp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `nhdp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="93">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="80" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_memory_object.c">
   <explanation>
   function or method: NaClMemObjMake
   line-by-line trace: 68,(70,take the False branch),(74,write of variable `nmop'),(74,take the True branch),75,(80,indirect_deref of variable `nmop')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `nmop' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="94">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="100" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_memory_object.c">
   <explanation>
   function or method: NaClMemObjSplit
   line-by-line trace: 89,(91,take the False branch),(94,write of variable `nmop'),(94,take the True branch),95,(100,indirect_deref of variable `nmop')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `nmop' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="95">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="743" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/sel_ldr.c">
   <explanation>
   function or method: NaClAddImcHandle
   line-by-line trace: 737,(739,write of variable `dp'),(740,take the True branch),741,(743,indirect_deref of variable `dp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `dp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="96">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="759" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/sel_ldr.c">
   <explanation>
   function or method: NaClAddImcAddr
   line-by-line trace: 753,(755,write of variable `dp'),(756,take the True branch),757,(759,indirect_deref of variable `dp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `dp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="97">
  <name>
   PTR-null-assign
  </name>
  <location line="211" path="chrome-5.0.375.70/net/disk_cache/mem_entry_impl.cc">
   <explanation>
   function or method: disk_cache::MemEntryImpl::WriteSparseData
   line-by-line trace: (213,take the True branch),(215,take the False branch),(218,take the False branch),(218,take the False branch),221,(228,take the True branch),(229,write of variable `child'),230
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `child' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="98">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="30" path="chrome-5.0.375.70/net/ftp/ftp_directory_listing_buffer.cc">
   <explanation>
   function or method: _GLOBAL__N__31_ftp_directory_listing_buffer_cc_a6d34b52::DetectEncoding
   line-by-line trace: (26,take the False branch),28,(29,write of variable `detector'),30,31,(30,indirect_deref of variable `detector')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `detector' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="99">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="33" path="chrome-5.0.375.70/net/ftp/ftp_directory_listing_buffer.cc">
   <explanation>
   function or method: _GLOBAL__N__31_ftp_directory_listing_buffer_cc_a6d34b52::DetectEncoding
   line-by-line trace: (26,take the False branch),28,29,30,31,30,(32,write of variable `match'),(33,indirect_deref of variable `match')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `match' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="100">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="826" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsecur.c">
   <explanation>
   function or method: SSL_ConfigSecureServer
   line-by-line trace: 755,756,(757,write of variable `keyPair'),758,104,758,760,(761,take the False branch),(768,take the False branch),(774,take the False branch),(774,take the False branch),(779,take the False branch),(784,take the True branch),786,(787,take the False branch),(791,take the False branch),(826,indirect_deref of variable `keyPair')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `keyPair' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="101">
  <name>
   PTR-null-assign
  </name>
  <location line="793" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsnce.c">
   <explanation>
   function or method: ServerSessionIDLookup
   line-by-line trace: 774,775,776,777,778,779,780,781,782,783,784,786,787,(788,take the False branch),(791,write of variable `psce'),(792,take the True branch),(792,cmp_nonnull of variable `psce'),(793,deref of variable `psce'),(793,take the True branch),(794,deref of variable `psce'),(794,take the True branch),796,(797,take the False branch),(818,take the True branch),(819,write of variable `psce'),820
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `psce' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="102">
  <name>
   PTR-null-assign
  </name>
  <location line="246" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/V8Proxy.cpp">
   <explanation>
   function or method: WebCore::V8Proxy::handleOutOfMemory
   line-by-line trace: 248,(250,take the False branch),(254,write of variable `frame'),256
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `frame' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="103">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="1493" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/ApplyStyleCommand.cpp">
   <explanation>
   function or method: WebCore::ApplyStyleCommand::removeInlineStyle
   line-by-line trace: (1441,take the True branch),(1441,take the False branch),(1442,take the True branch),(1442,take the False branch),(1443,take the False branch),(1444,take the True branch),(1444,take the False branch),(1445,take the True branch),(1445,take the False branch),1447,(1449,take the False branch),1458,1459,1461,(1462,take the True branch),1463,(1464,take the True branch),(1464,take the True branch),1465,(1466,write of variable `prev'),1467,(1468,take the False branch),(1471,take the True branch),1472,(1476,take the True branch),1477,1478,1479,(1481,take the True branch),(1482,take the False branch),(1488,take the True branch),(1492,take the False branch),(1493,indirect_deref of variable `prev')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `prev' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="104">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="102" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/animation/KeyframeAnimation.cpp">
   <explanation>
   function or method: WebCore::KeyframeAnimation::getKeyframeAnimationInterval
   line-by-line trace: 68,(70,take the False branch),71,72,(73,take the True branch),(73,take the False branch),76,77,78,(79,take the False branch),90,(93,take the False branch),(93,take the False branch),(96,write of variable `timingFunction'),(97,take the False branch),(102,indirect_deref of variable `timingFunction')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `timingFunction' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="105">
  <name>
   PTR-null-assign
  </name>
  <location line="85" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObjectChildList.cpp">
   <explanation>
   function or method: WebCore::RenderObjectChildList::removeChildNode
   line-by-line trace: (66,take the True branch),(66,take the False branch),(71,take the True branch),(71,take the True branch),(71,take the True branch),72,73,(77,take the True branch),78,(80,take the True branch),(80,take the True branch),(82,write of variable `layer'),(83,take the True branch),(83,take the True branch),(83,take the True branch),(84,write of variable `layer'),(85,deref of variable `layer')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `layer' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="106">
  <name>
   PTR-null-assign
  </name>
  <location line="185" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderView.cpp">
   <explanation>
   function or method: WebCore::RenderView::paintBoxDecorations
   line-by-line trace: 182,(183,take the True branch),(183,take the True branch),(183,take the True branch),(184,write of variable `layer'),(185,deref of variable `layer')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `layer' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="107">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2016" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebFrameImpl.cpp">
   <explanation>
   function or method: WebKit::WebFrameImpl::addMarker
   line-by-line trace: 2000,(2001,take the True branch),2002,2003,2005,(2013,take the True branch),(2015,write of variable `node'),(2016,indirect_deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `node' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="108">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2226" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/utils.c">
   <explanation>
   function or method: av_find_stream_info
   line-by-line trace: 2117,2118,2119,2120,2121,2122,2123,2124,2125,2127,(2128,take the False branch),(2130,take the False branch),(2159,take the False branch),2163,2164,2165,(2166,take the False branch),(2173,take the True branch),2174,(2175,take the True branch),2176,2184,(2186,take the True branch),(2190,take the False branch),(2198,take the False branch),2206,(2207,take the False branch),(2209,take the False branch),(2225,write of variable `pkt'),(2226,indirect_deref of variable `pkt')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `pkt' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="109">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="913" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-arabic.c">
   <explanation>
   function or method: shapedString
   line-by-line trace: 889,890,891,892,893,894,895,(896,write of variable `props'),(896,take the True branch),(896,write of variable `props'),897,(899,take the True branch),(901,take the False branch),(906,take the True branch),907,908,909,(911,take the True branch),912,(913,indirect_deref of variable `props')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `props' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="110">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="1066" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-arabic.c">
   <explanation>
   function or method: arabicSyriacOpenTypeShape
   line-by-line trace: 1033,1034,1035,1036,1037,(1038,write of variable `props'),1039,1040,1041,1043,(1045,take the False branch),1047,(1049,take the True branch),(1049,write of variable `props'),(1050,take the False branch),1052,1054,1055,1056,(1057,take the True branch),1058,1059,1060,(1062,take the False branch),(1065,take the True branch),(1066,indirect_deref of variable `props')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `props' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="111">
  <name>
   PTR-null-assign-pos
  </name>
  <location line="1703" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::compound_check
   line-by-line trace: 1553,1554,(1555,write of variable `rv'),1556,1557,1558,1559,1560,1561,1562,1563,1564,1565,1566,1567,1568,1570,1572,1574,(1576,take the True branch),1578,1579,1580,(1583,take the False branch),1588,(1590,take the True branch),(1591,take the True branch),(1591,take the False branch),(1592,take the False branch),(1594,take the False branch),1595,1596,1597,1598,1599,1601,1602,1603,1604,1605,1607,1611,1612,1614,1615,(1619,write of variable `rv'),(1622,take the False branch),(1638,take the True branch),(1639,take the False branch),(1652,take the False branch),1655,(1653,take the True branch),(1653,take the True branch),(1654,take the True branch),(1654,write of variable `rv'),(1655,take the True branch),(1655,write of variable `rv'),(1656,take the True branch),(1656,take the True branch),(1657,take the True branch),(1657,write of variable `rv'),(1658,take the True branch),(1658,write of variable `rv'),(1658,cmp_nonnull of variable `rv'),1659,(1670,take the True branch),(1670,cmp_nonnull of variable `rv'),(1670,take the True branch),1673,(1671,take the True branch),(1671,take the True branch),1672,1671,1672,(1671,take the False branch),(1674,take the True branch),(1674,take the True branch),1675,1674,1675,(1674,take the True branch),(1677,write of variable `rv'),(1681,take the True branch),(1681,cmp_nonnull of variable `rv'),(1681,take the True branch),(1681,take the True branch),(1681,take the True branch),1684,(1682,take the True branch),(1682,take the True branch),1683,1682,1683,(1682,take the False branch),(1685,take the True branch),(1685,take the False branch),(1692,take the True branch),(1692,cmp_nonnull of variable `rv'),(1692,take the True branch),(1692,take the True branch),(1692,take the True branch),(1692,take the True branch),1695,(1693,take the True branch),(1693,take the True branch),1694,1693,1694,(1693,take the False branch),(1696,take the True branch),(1696,take the True branch),1697,1696,1697,(1696,take the True branch),(1699,write of variable `rv'),(1703,take the True branch),(1703,deref of variable `rv'),(1703,take the True branch),(1703,deref of variable `rv'),(1703,deref of variable `rv'),(1703,take the False branch),(1704,take the True branch),(1704,take the True branch),(1704,deref of variable `rv'),(1704,deref of variable `rv'),(1704,take the False branch),(1709,take the True branch),(1709,cmp_nonnull of variable `rv'),(1709,take the True branch),(1710,deref of variable `rv'),(1710,deref of variable `rv'),(1709,take the True branch),1711,1747,1736,1730,(1715,take the False branch),(1747,take the True branch),(1747,take the True branch),(1747,take the True branch),(1747,write of variable `rv'),(1748,cmp_nonnull of variable `rv'),(1748,take the True branch),(1748,take the True branch),(1749,take the False branch),1750,1749,1750,(1749,take the True branch),(1757,take the True branch),1759,(1762,take the True branch),(1762,take the True branch),1768,1769,1771,(1774,take the True branch),(1775,take the True branch),1776,1777,(1781,write of variable `rv'),(1784,take the False branch),(1794,take the True branch),(1794,cmp_nonnull of variable `rv'),(1794,take the False branch),1796,1797,(1800,take the True branch),(1800,cmp_nonnull of variable `rv'),(1800,take the True branch),(1800,deref of variable `rv'),(1800,deref of variable `rv'),(1800,take the True branch),(1800,deref of variable `rv'),(1800,deref of variable `rv'),(1800,take the True branch),1801,(1806,take the True branch),(1806,cmp_nonnull of variable `rv'),(1806,take the False branch),(1812,take the True branch),(1812,deref of variable `rv'),(1812,take the True branch),(1812,deref of variable `rv'),(1812,deref of variable `rv'),(1812,take the False branch),(1813,take the True branch),(1813,take the True branch),(1813,deref of variable `rv'),(1813,deref of variable `rv'),(1813,take the False branch),1837,1832,1828,1824,(1820,take the True branch),(1821,cmp_nonnull of variable `rv'),(1821,take the True branch),(1821,deref of variable `rv'),(1821,deref of variable `rv'),(1821,take the False branch),(1822,take the True branch),(1822,deref of variable `rv'),(1822,deref of variable `rv'),(1822,take the True branch),(1825,take the False branch),(1825,take the False branch),(1826,take the True branch),(1827,deref of variable `rv'),(1827,deref of variable `rv'),(1827,take the True branch),(1831,take the False branch),(1831,take the False branch),(1831,take the True branch),(1834,take the False branch),(1834,take the True branch),(1837,take the False branch),(1837,take the False branch),(1838,deref of variable `rv'),(1838,deref of variable `rv'),(1837,take the False branch),1846,1847,1850,1851,(1852,take the True branch),(1852,write of variable `rv'),(1853,take the False branch),(1859,take the True branch),(1859,take the True branch),(1859,take the True branch),(1860,write of variable `rv'),(1861,take the True branch),(1861,cmp_nonnull of variable `rv'),(1861,take the False branch),(1862,write of variable `rv'),(1866,take the False branch),(1870,take the False branch),(1873,take the False branch),(1884,take the False branch),(1892,take the True branch),1894,(1898,take the True branch),1899,1900,1901,(1905,take the True branch),(1905,take the True branch),(1910,take the True branch),1911,(1914,deref of variable `rv')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Variable `rv' is assigned NULL, then possibly dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="112">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="1054" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::parse
   line-by-line trace: 920,921,(923,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(923,take the False branch),927,928,937,(940,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(940,take the True branch),941,1042,(1051,take the True branch),1052,(1053,write of variable `operand'),(1054,indirect_deref of variable `operand')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `operand' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="113">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="484" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv.c">
   <explanation>
   function or method: ucnv_setSubstString_4_2
   line-by-line trace: 474,475,477,478,479,482,(483,write of variable `clone'),(484,indirect_deref of variable `clone')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `clone' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="114">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="839" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv_bld.c">
   <explanation>
   function or method: ucnv_createConverter_4_2
   line-by-line trace: 828,829,830,(834,take the True branch),(837,write of variable `mySharedConverterData'),839,841,(839,indirect_deref of variable `mySharedConverterData')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `mySharedConverterData' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="115">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="869" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv_bld.c">
   <explanation>
   function or method: ucnv_canCreateConverter_4_2
   line-by-line trace: 857,858,859,860,(864,take the True branch),867,(868,write of variable `mySharedConverterData'),869,871,(869,indirect_deref of variable `mySharedConverterData')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `mySharedConverterData' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="116">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="961" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv_bld.c">
   <explanation>
   function or method: ucnv_createConverterFromPackage_4_2
   line-by-line trace: 925,926,927,928,(932,take the False branch),940,941,942,(943,user_error_fun of function `_Z21parseConverterOptionsPKcPUt37_PUt27_P10UErrorCode'),(944,take the False branch),949,950,(953,user_error_fun of function `_Z23createConverterFromFilePUt27_P10UErrorCode'),(953,write of variable `mySharedConverterData'),(955,take the False branch),(961,indirect_deref of variable `mySharedConverterData')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `mySharedConverterData' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="117">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="1786" path="chrome-5.0.375.70/third_party/icu/source/common/uloc.c">
   <explanation>
   function or method: _canonicalize
   line-by-line trace: 1579,1580,1581,1582,1583,1584,(1585,write of variable `addValue'),1586,1587,(1589,take the False branch),(1593,take the True branch),1594,1596,(1600,take the True branch),(1601,take the False branch),(1601,take the True branch),1602,1603,1610,(1612,take the False branch),(1620,take the False branch),(1620,take the False branch),(1663,take the True branch),(1663,take the True branch),1664,1665,1666,1667,1668,1669,1670,1671,1678,(1680,take the False branch),(1685,take the False branch),1692,(1691,take the True branch),(1692,take the True branch),(1692,take the True branch),1693,1694,(1695,take the True branch),1696,1702,(1706,take the False branch),(1770,take the True branch),(1771,take the True branch),(1771,take the True branch),(1772,take the False branch),(1772,take the False branch),(1780,take the True branch),1783,1784,1785,(1786,indirect_deref of variable `addValue')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `addValue' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="118">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="317" path="chrome-5.0.375.70/third_party/icu/source/common/unormcmp.cpp">
   <explanation>
   function or method: unorm_cmpEquivFold
   line-by-line trace: 143,146,149,150,153,156,159,162,165,(176,take the False branch),(176,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),177,(176,take the False branch),(181,take the False branch),(187,write of variable `csp'),191,(192,take the True branch),193,198,(199,take the True branch),200,205,206,209,(215,take the True branch),217,(218,take the False branch),(218,take the True branch),(218,take the False branch),(218,take the True branch),(219,take the True branch),220,221,234,(238,take the False branch),(265,take the False branch),(271,take the False branch),(273,take the False branch),279,(280,take the True branch),281,(283,take the True branch),(284,take the True branch),(284,take the True branch),286,295,(296,take the False branch),(316,take the True branch),(316,take the True branch),(317,indirect_deref of variable `csp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `csp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="119">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2070" path="chrome-5.0.375.70/third_party/icu/source/common/uresbund.c">
   <explanation>
   function or method: ures_getVersionNumber_4_2
   line-by-line trace: (2040,take the False branch),(2042,take the True branch),2046,2047,2048,(2050,write of variable `minor_version'),(2057,take the True branch),2063,(2065,take the False branch),(2069,take the True branch),(2070,indirect_deref of variable `minor_version')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `minor_version' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="120">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2283" path="chrome-5.0.375.70/third_party/icu/source/common/uresbund.c">
   <explanation>
   function or method: ures_getFunctionalEquivalent_4_2
   line-by-line trace: 2214,2215,2216,2217,2218,2219,2220,2221,2222,2223,2224,(2225,take the False branch),2226,(2227,take the True branch),2228,2230,2235,2236,2239,2240,(2242,take the True branch),2243,2244,(2245,take the True branch),(2246,user_error_fun of function `_Z14isLocaleInListP12UEnumerationPKcP10UErrorCode'),2248,(2251,take the False branch),2256,2257,2258,2260,2259,599,(2259,take the False branch),2260,603,(2260,take the True branch),(2260,take the True branch),2262,2264,(2269,take the False branch),(2271,take the True branch),2272,(2273,take the True branch),2274,2275,(2281,write of variable `defUstr'),(2282,take the True branch),(2282,take the True branch),(2283,indirect_deref of variable `defUstr')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `defUstr' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="121">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2358" path="chrome-5.0.375.70/third_party/icu/source/common/uresbund.c">
   <explanation>
   function or method: ures_getFunctionalEquivalent_4_2
   line-by-line trace: 2214,2215,2216,2217,2218,2219,2220,2221,2222,2223,2224,(2225,take the False branch),2226,(2227,take the True branch),2228,2230,2235,2236,2239,2240,(2242,take the True branch),2243,2244,(2245,take the True branch),(2246,user_error_fun of function `_Z14isLocaleInListP12UEnumerationPKcP10UErrorCode'),2248,(2251,take the False branch),2256,2257,2258,2260,2259,599,(2259,take the False branch),2260,603,(2260,take the True branch),(2260,take the True branch),2262,2264,(2269,take the True branch),2270,2300,(2302,take the False branch),2306,2307,(2308,take the True branch),(2308,take the True branch),(2308,take the True branch),(2308,take the False branch),2311,2312,2314,2315,2316,2317,599,(2317,take the True branch),(2317,take the True branch),2318,2320,(2326,take the False branch),(2328,take the True branch),2329,(2333,take the True branch),2334,(2338,take the True branch),2343,(2344,take the True branch),2345,(2348,take the True branch),2349,2350,(2356,write of variable `defUstr'),(2357,take the True branch),(2357,take the True branch),(2358,indirect_deref of variable `defUstr')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `defUstr' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="122">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2434" path="chrome-5.0.375.70/third_party/icu/source/common/uresbund.c">
   <explanation>
   function or method: ures_getFunctionalEquivalent_4_2
   line-by-line trace: 2214,2215,2216,2217,2218,2219,2220,2221,2222,2223,2224,(2225,take the False branch),2226,(2227,take the True branch),2228,2230,2235,2236,2239,2240,(2242,take the True branch),2243,2244,(2245,take the True branch),(2246,user_error_fun of function `_Z14isLocaleInListP12UEnumerationPKcP10UErrorCode'),2248,(2251,take the False branch),2256,2257,2258,2260,2259,599,(2259,take the False branch),2260,603,(2260,take the True branch),(2260,take the True branch),2262,2264,(2269,take the True branch),2270,2300,(2302,take the False branch),2306,2307,(2308,take the True branch),(2308,take the True branch),(2308,take the True branch),(2308,take the False branch),2311,2312,2314,2315,2316,2317,599,(2317,take the True branch),(2317,take the True branch),2318,2320,(2326,take the True branch),2327,2380,2382,2383,2384,(2385,take the True branch),(2385,take the True branch),(2385,take the False branch),(2387,take the True branch),(2387,take the True branch),2391,2392,2393,2395,2396,2397,2398,599,(2398,take the True branch),(2398,take the True branch),2399,2401,(2407,take the False branch),(2409,take the True branch),2410,(2411,take the True branch),2412,(2413,take the True branch),2418,(2419,take the True branch),2420,(2424,take the True branch),2425,2426,(2432,write of variable `defUstr'),(2433,take the True branch),(2433,take the True branch),(2434,indirect_deref of variable `defUstr')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `defUstr' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="123">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="62" path="chrome-5.0.375.70/third_party/icu/source/common/uscript.c">
   <explanation>
   function or method: uscript_getCode_4_2
   line-by-line trace: 33,47,33,34,35,(37,take the False branch),(37,take the False branch),(40,take the False branch),(40,take the False branch),(40,take the False branch),(45,take the False branch),50,570,(50,take the True branch),52,53,(54,take the True branch),603,(54,take the True branch),55,(56,take the True branch),57,(58,take the True branch),(59,write of variable `name'),(60,take the True branch),61,(62,indirect_deref of variable `name')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `name' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="124">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="356" path="chrome-5.0.375.70/third_party/icu/source/common/ushape.c">
   <explanation>
   function or method: _shapeToArabicDigitsWithContext
   line-by-line trace: 318,319,321,322,324,(325,write of variable `bdp'),(326,take the False branch),330,(333,take the False branch),(354,take the True branch),355,(356,indirect_deref of variable `bdp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `bdp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="125">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="816" path="chrome-5.0.375.70/third_party/icu/source/common/ustrcase.c">
   <explanation>
   function or method: u_strcmpFold_4_2
   line-by-line trace: 657,660,663,664,667,670,673,676,(684,write of variable `csp'),(685,take the False branch),690,(691,take the True branch),692,697,(698,take the False branch),701,704,705,708,(714,take the True branch),716,(717,take the False branch),(717,take the True branch),(717,take the False branch),(717,take the True branch),(718,take the True branch),719,720,733,(737,take the False branch),(764,take the False branch),(770,take the False branch),(772,take the False branch),778,(779,take the False branch),794,(795,take the False branch),(815,take the True branch),(816,indirect_deref of variable `csp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `csp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="126">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2733" path="chrome-5.0.375.70/third_party/icu/source/common/utext.cpp">
   <explanation>
   function or method: charIterTextClone
   line-by-line trace: (2718,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(2718,take the False branch),(2722,take the False branch),2727,2728,(2729,indirect_deref of variable `dest'),(2729,write of variable `dest'),2732,(2733,indirect_deref of variable `dest')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `dest' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="127">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="352" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: ucol_initFromBinary
   line-by-line trace: (319,write of variable `result'),(320,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(320,take the False branch),331,332,335,(334,take the True branch),(334,take the False branch),(335,take the False branch),(336,take the False branch),(342,take the True branch),(342,take the True branch),(342,take the False branch),(350,take the True branch),(351,write of variable `result'),(352,indirect_deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `result' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="128">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2308" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: getNextNormalizedChar
   line-by-line trace: 2186,2187,(2192,take the False branch),(2205,write of variable `pEndWritableBuffer'),2206,(2207,take the True branch),(2207,take the False branch),(2208,take the False branch),(2217,take the False branch),(2224,take the False branch),(2264,take the False branch),2270,2271,(2277,take the False branch),(2277,take the True branch),(2278,take the False branch),(2279,take the False branch),(2303,take the True branch),(2308,indirect_deref of variable `pEndWritableBuffer')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `pEndWritableBuffer' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="129">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2710" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: getPrevNormalizedChar
   line-by-line trace: 2638,2639,2640,2641,(2642,write of variable `pNull'),(2643,take the False branch),(2644,take the False branch),2658,(2659,take the False branch),(2659,take the True branch),(2661,take the False branch),2664,2665,2666,(2688,take the False branch),(2705,take the True branch),(2710,indirect_deref of variable `pNull')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `pNull' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="130">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="261" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_res.cpp">
   <explanation>
   function or method: ucol_open_internal_4_2
   line-by-line trace: 172,173,(176,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(176,take the False branch),(180,write of variable `result'),181,184,185,186,(188,take the False branch),(189,take the True branch),191,193,(194,user_error_fun of function `_Z9U_SUCCESS10UErrorCode'),(194,take the True branch),195,196,197,198,203,205,206,208,(210,take the False branch),(225,user_error_fun of function `_Z9U_SUCCESS10UErrorCode'),(225,take the True branch),226,228,(230,take the False branch),(236,user_error_fun of function `_Z9U_SUCCESS10UErrorCode'),(236,take the True branch),237,238,(239,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(239,take the False branch),242,244,(243,take the False branch),(244,take the False branch),(245,take the False branch),(250,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(250,take the False branch),(253,take the True branch),(253,take the True branch),(253,take the False branch),(260,write of variable `result'),(261,indirect_deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `result' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="131">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="325" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: initializePatternCETable
   line-by-line trace: 297,298,299,300,(301,write of variable `coleiter'),(303,take the True branch),(304,write of variable `coleiter'),309,(317,take the True branch),(317,take the True branch),318,321,322,323,(325,indirect_deref of variable `coleiter')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `coleiter' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="132">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="400" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: initializePatternPCETable
   line-by-line trace: 368,369,370,371,(372,write of variable `coleiter'),(374,take the True branch),(375,write of variable `coleiter'),380,(387,take the True branch),(387,take the True branch),388,391,392,393,395,(400,indirect_deref of variable `coleiter')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `coleiter' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="133">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="164" path="chrome-5.0.375.70/third_party/icu/source/i18n/uspoof_buildwsconf.cpp">
   <explanation>
   function or method: buildWSConfusableData
   line-by-line trace: (102,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(102,take the False branch),(105,write of variable `parseRegexp'),106,107,108,110,111,113,114,116,117,(132,user_error_fun of function `_ZN7icu_4_27UVectorC1ER10UErrorCode'),(133,take the False branch),137,138,141,(142,take the False branch),145,146,(147,take the False branch),151,(155,write of variable `parseRegexp'),(159,take the True branch),160,(164,indirect_deref of variable `parseRegexp')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `parseRegexp' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="134">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="164" path="chrome-5.0.375.70/third_party/libevent/evrpc.c">
   <explanation>
   function or method: evrpc_remove_hook
   line-by-line trace: 151,(152,write of variable `head'),153,160,(161,take the False branch),(161,take the True branch),(164,indirect_deref of variable `head')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `head' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="135">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2103" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_decode_uri
   line-by-line trace: 2097,(2099,write of variable `ret'),(2099,take the True branch),2100,2101,2100,(2103,indirect_deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `ret' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="136">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2149" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_parse_query
   line-by-line trace: 2117,2118,2119,2121,(2124,take the False branch),(2127,take the False branch),2131,2134,2136,(2137,take the True branch),(2137,take the True branch),2138,2139,2141,2142,(2143,take the False branch),(2146,write of variable `decoded_value'),(2146,take the True branch),2147,(2149,indirect_deref of variable `decoded_value')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `decoded_value' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="137">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="101" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/urlencode.cc">
   <explanation>
   function or method: UrlDecodeString
   line-by-line trace: 91,92,(93,take the False branch),97,98,(99,take the True branch),(99,write of variable `buf'),(101,indirect_deref of variable `buf')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `buf' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="138">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="116" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/urlencode.cc">
   <explanation>
   function or method: UrlEncodeString
   line-by-line trace: 111,112,113,(114,take the False branch),(114,write of variable `buf'),(116,indirect_deref of variable `buf')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `buf' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="139">
  <name>
   PTR-null-assign
  </name>
  <location line="944" path="chrome-5.0.375.70/third_party/libxml/hash.c">
   <explanation>
   function or method: xmlHashCopy
   line-by-line trace: 945,946,947,948,(950,take the False branch),(952,take the False branch),(955,write of variable `ret'),(956,take the True branch),(957,take the True branch),(958,take the True branch),959,965,957
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ret' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="140">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="10198" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGValidateState
   line-by-line trace: 9646,9647,9648,(9650,take the False branch),(9655,take the True branch),9656,9672,9673,10131,10132,(10133,write of variable `states'),10135,10137,(10138,take the True branch),(10138,take the False branch),10183,10184,10185,(10187,take the True branch),10188,10189,(10190,take the True branch),(10191,take the True branch),(10192,write of variable `states'),(10194,take the False branch),(10196,take the True branch),(10197,take the True branch),10198,10199,10200,(10198,indirect_deref of variable `states')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `states' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="141">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="4005" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the True branch),(3982,take the True branch),3983,3984,3986,3988,(3989,take the False branch),(3993,take the True branch),3994,3996,(3997,take the False branch),4002,(4004,write of variable `q2'),(4005,indirect_deref of variable `q2')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `q2' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="142">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="4050" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the False branch),(4026,take the True branch),4027,4028,4031,4032,(4034,take the False branch),(4038,take the True branch),4039,4041,(4042,take the False branch),4047,(4049,write of variable `p2'),(4050,indirect_deref of variable `p2')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `p2' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="143">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="4079" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the True branch),(3982,take the False branch),(4076,take the True branch),4077,(4078,write of variable `q1'),(4079,indirect_deref of variable `q1')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `q1' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="144">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="4082" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the True branch),(3982,take the False branch),(4076,take the True branch),4077,4078,4079,(4081,write of variable `p1'),(4082,indirect_deref of variable `p1')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `p1' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="145">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="83" path="chrome-5.0.375.70/third_party/skia/src/images/SkCreateRLEPixelRef.cpp">
   <explanation>
   function or method: SkCreateRLEPixelRef
   line-by-line trace: (56,take the True branch),(57,take the False branch),61,64,(65,take the True branch),66,69,(72,write of variable `dstRow'),73,74,(76,take the True branch),77,(79,take the False branch),(83,indirect_deref of variable `dstRow')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `dstRow' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="146">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="280" path="chrome-5.0.375.70/third_party/sqlite/ext/icu/icu.c">
   <explanation>
   function or method: icuRegexpFunc
   line-by-line trace: 250,251,252,253,(258,take the False branch),(258,take the False branch),(262,write of variable `pExpr'),(263,take the True branch),264,(265,take the False branch),(268,write of variable `pExpr'),(270,take the True branch),271,(280,indirect_deref of variable `pExpr')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `pExpr' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="147">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="979" path="chrome-5.0.375.70/third_party/sqlite/src/insert.c">
   <explanation>
   function or method: sqlite3Insert
   line-by-line trace: 441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,464,465,466,467,468,469,470,471,(472,write of variable `aRegIdx'),475,476,477,480,481,(482,take the False branch),(482,take the False branch),488,489,(490,take the False branch),491,(492,take the False branch),495,496,497,498,(499,take the False branch),507,508,518,(524,take the False branch),(532,take the False branch),538,(539,take the False branch),(540,take the True branch),(541,take the True branch),(553,take the True branch),(553,take the False branch),563,(570,take the False branch),669,670,671,672,673,(674,take the True branch),(675,take the False branch),(685,take the True branch),(686,take the False branch),(690,take the True branch),(690,take the True branch),(690,take the False branch),(696,take the True branch),(696,take the False branch),(712,take the False branch),(743,take the True branch),(743,take the True branch),744,(749,take the True branch),750,751,(755,take the False branch),(770,take the True branch),780,781,799,800,801,(802,take the True branch),803,804,806,810,(811,take the False branch),(883,take the True branch),(884,take the True branch),886,(888,take the False branch),(920,take the True branch),921,926,931,(932,take the False branch),(970,take the False branch),978,979,980,979,980,(979,indirect_deref of variable `aRegIdx')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `aRegIdx' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="148">
  <name>
   PTR-null-assign-pos
  </name>
  <location line="1578" path="chrome-5.0.375.70/third_party/sqlite/src/main.c">
   <explanation>
   function or method: openDatabase
   line-by-line trace: 1528,1529,1530,1532,1534,(1535,take the False branch),(1538,take the True branch),1539,(1547,take the True branch),1548,1561,1562,1563,1564,1565,1566,1567,1568,1569,1570,1561,(1575,write of variable `db'),(1576,take the False branch),(1577,take the True branch),(1578,deref of variable `db'),(1579,deref of variable `db'),(1579,take the True branch),1580,(1581,write of variable `db'),1582,1734,(1735,take the False branch),1739,(1740,take the False branch),(1743,take the True branch),(1744,deref of variable `db')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Variable `db' is assigned NULL, then possibly dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="149">
  <name>
   PTR-null-assign
  </name>
  <location line="2049" path="chrome-5.0.375.70/third_party/sqlite/src/select.c">
   <explanation>
   function or method: multiSelectOrderBy
   line-by-line trace: 1997,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,2030,2031,2033,2034,2035,2036,2037,2038,2039,2044,2045,2046,(2047,write of variable `pOrderBy'),2048,(2049,deref of variable `pOrderBy'),(2055,take the True branch),(2056,take the True branch),(2056,take the True branch),2057,(2058,deref of variable `pOrderBy'),(2058,take the True branch),2059,(2060,take the True branch),(2062,take the True branch),2063,(2064,take the False branch),2065,2066,(2067,write of variable `pOrderBy'),(2068,deref of variable `pOrderBy'),(2056,take the False branch),2080,(2081,take the True branch),2082,(2083,deref of variable `pOrderBy'),(2083,take the True branch),2084,2085,2083
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `pOrderBy' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="150">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="1717" path="chrome-5.0.375.70/third_party/sqlite/src/vdbeaux.c">
   <explanation>
   function or method: vdbeCommit
   line-by-line trace: 1583,1584,1585,1586,1601,(1602,take the False branch),(1612,take the False branch),(1621,take the False branch),1640,(1639,take the False branch),(1640,take the False branch),1671,1672,1673,1674,(1675,write of variable `pMaster'),1676,1677,1680,1681,1682,1683,1684,(1685,take the False branch),1688,(1689,take the True branch),(1689,take the False branch),(1690,take the False branch),(1697,take the False branch),(1708,take the True branch),1709,(1710,take the False branch),(1711,take the True branch),1712,(1713,take the False branch),(1714,take the True branch),(1714,take the True branch),1715,(1717,indirect_deref of variable `pMaster')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `pMaster' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="151">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="2812" path="chrome-5.0.375.70/third_party/sqlite/src/where.c">
   <explanation>
   function or method: codeOneLoopStart
   line-by-line trace: 2709,2710,2711,2712,2713,2714,2715,2716,2717,2718,2719,2720,2721,2722,2723,2725,2726,2727,2728,2729,2730,2731,2732,2733,(2732,take the False branch),2745,2746,(2752,take the True branch),(2752,take the True branch),2753,2754,(2759,take the False branch),(2800,take the True branch),2806,(2807,write of variable `pTerm'),2808,2809,2810,2811,(2812,indirect_deref of variable `pTerm')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `pTerm' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="152">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="1545" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::ThisNamedPropertyAssigmentFinder::Update
   line-by-line trace: (1538,take the False branch),(1543,write of variable `assignment'),(1544,take the True branch),(1545,indirect_deref of variable `assignment')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `assignment' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="153">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="3599" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::Parser::ParseObjectLiteral
   line-by-line trace: 3575,3576,3575,3577,(3579,take the False branch),(3580,take the True branch),3581,3582,3583,3587,3588,3589,3590,3589,3590,3589,(3590,take the False branch),(3591,take the False branch),(3591,take the True branch),(3593,take the True branch),(3594,take the False branch),3595,3596,(3595,write of variable `value'),(3597,take the False branch),3598,(3599,take the False branch),(3599,indirect_deref of variable `value')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `value' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="154">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="3642" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::Parser::ParseObjectLiteral
   line-by-line trace: 3575,3576,3575,3577,(3579,take the False branch),(3580,take the True branch),(3581,write of variable `key'),3582,3633,(3634,take the False branch),3635,(3638,take the False branch),(3639,take the False branch),3641,(3642,take the False branch),(3642,indirect_deref of variable `key')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `key' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="155">
  <name>
   PTR-null-assign-fun-pos
  </name>
  <location line="4483" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::RegExpParser::ParseDisjunction
   line-by-line trace: 4358,4359,4361,(4362,take the True branch),4363,4481,(4482,write of variable `atom'),(4482,take the False branch),(4483,indirect_deref of variable `atom')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Dereference of `atom' which may be NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="156">
  <name>
   PTR-null-assign
  </name>
  <location line="48" path="chrome-5.0.375.70/v8/src/profile-generator.cc">
   <explanation>
   function or method: v8::internal::ProfileNode::FindOrAddChild
   line-by-line trace: 46,47,(46,write of variable `map_entry'),(48,deref of variable `map_entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `map_entry' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="157">
  <name>
   PTR-null-assign
  </name>
  <location line="318" path="chrome-5.0.375.70/v8/src/profile-generator.cc">
   <explanation>
   function or method: v8::internal::CpuProfilesCollection::GetName
   line-by-line trace: (311,take the True branch),312,313,312,314,315,314,316,(314,write of variable `cache_entry'),(318,deref of variable `cache_entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `cache_entry' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="158">
  <name>
   PTR-null-assign
  </name>
  <location line="86" path="chrome-5.0.375.70/v8/src/scopes.cc">
   <explanation>
   function or method: v8::internal::VariableMap::Declare
   line-by-line trace: (85,write of variable `p'),(86,deref of variable `p')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `p' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="159">
  <name>
   PTR-null-assign
  </name>
  <location line="488" path="chrome-5.0.375.70/v8/src/serialize.cc">
   <explanation>
   function or method: v8::internal::ExternalReferenceEncoder::Put
   line-by-line trace: (487,write of variable `entry'),(488,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.8"/>
  <output>
   <textoutput>
   Variable `entry' is assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="160">
  <name>
   PTR-null-assign-pos
  </name>
  <location line="746" path="chrome-5.0.375.70/webkit/glue/plugins/webplugin_impl.cc">
   <explanation>
   function or method: webkit_glue::WebPluginImpl::didReceiveResponse
   line-by-line trace: 735,736,(738,write of variable `client'),(739,take the False branch),742,743,745,(746,deref of variable `client'),(746,take the True branch),(747,take the False branch),(750,take the True branch),(760,take the False branch),767,769,(770,write of variable `client'),(773,take the False branch),779,(783,take the False branch),791,(793,deref of variable `client')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Variable `client' is assigned NULL, then possibly dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="161">
  <name>
   PTR-null-assign-pos
  </name>
  <location line="1703" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::compound_check
   line-by-line trace: 1553,1554,(1555,write of variable `rv'),1556,1557,1558,1559,1560,1561,1562,1563,1564,1565,1566,1567,1568,1570,1572,1574,(1576,take the True branch),1578,1579,1580,(1583,take the False branch),1588,(1590,take the True branch),(1591,take the True branch),(1591,take the False branch),(1592,take the False branch),(1594,take the False branch),1595,1596,1597,1598,1599,1601,1602,1603,1604,1605,1607,1611,1612,1614,1615,(1619,write of variable `rv'),(1622,take the False branch),(1638,take the True branch),(1639,take the False branch),(1652,take the False branch),1655,(1653,take the True branch),(1653,take the True branch),(1654,take the True branch),(1654,write of variable `rv'),(1655,take the True branch),(1655,write of variable `rv'),(1656,take the True branch),(1656,take the True branch),(1657,take the True branch),(1657,write of variable `rv'),(1658,take the True branch),(1658,write of variable `rv'),(1658,cmp_nonnull of variable `rv'),1659,(1670,take the True branch),(1670,cmp_nonnull of variable `rv'),(1670,take the True branch),1673,(1671,take the True branch),(1671,take the True branch),1672,1671,1672,(1671,take the False branch),(1674,take the True branch),(1674,take the True branch),1675,1674,1675,(1674,take the True branch),(1677,write of variable `rv'),(1681,take the True branch),(1681,cmp_nonnull of variable `rv'),(1681,take the True branch),(1681,take the True branch),(1681,take the True branch),1684,(1682,take the True branch),(1682,take the True branch),1683,1682,1683,(1682,take the False branch),(1685,take the True branch),(1685,take the False branch),(1692,take the True branch),(1692,cmp_nonnull of variable `rv'),(1692,take the True branch),(1692,take the True branch),(1692,take the True branch),(1692,take the True branch),1695,(1693,take the True branch),(1693,take the True branch),1694,1693,1694,(1693,take the False branch),(1696,take the True branch),(1696,take the True branch),1697,1696,1697,(1696,take the True branch),(1699,write of variable `rv'),(1703,take the True branch),(1703,deref of variable `rv'),(1703,take the True branch),(1703,deref of variable `rv'),(1703,deref of variable `rv'),(1703,take the False branch),(1704,take the True branch),(1704,take the True branch),(1704,deref of variable `rv'),(1704,deref of variable `rv'),(1704,take the False branch),(1709,take the True branch),(1709,cmp_nonnull of variable `rv'),(1709,take the True branch),(1710,deref of variable `rv'),(1710,deref of variable `rv'),(1709,take the True branch),1711,1747,1736,1730,(1715,take the False branch),(1747,take the True branch),(1747,take the True branch),(1747,take the True branch),(1747,write of variable `rv'),(1748,cmp_nonnull of variable `rv'),(1748,take the True branch),(1748,take the True branch),(1749,take the False branch),1750,1749,1750,(1749,take the True branch),(1757,take the True branch),1759,(1762,take the True branch),(1762,take the True branch),1768,1769,1771,(1774,take the True branch),(1775,take the True branch),1776,1777,(1781,write of variable `rv'),(1784,take the False branch),(1794,take the True branch),(1794,cmp_nonnull of variable `rv'),(1794,take the False branch),1796,1797,(1800,take the True branch),(1800,cmp_nonnull of variable `rv'),(1800,take the True branch),(1800,deref of variable `rv'),(1800,deref of variable `rv'),(1800,take the True branch),(1800,deref of variable `rv'),(1800,deref of variable `rv'),(1800,take the True branch),1801,(1806,take the True branch),(1806,cmp_nonnull of variable `rv'),(1806,take the False branch),(1812,take the True branch),(1812,deref of variable `rv'),(1812,take the True branch),(1812,deref of variable `rv'),(1812,deref of variable `rv'),(1812,take the False branch),(1813,take the True branch),(1813,take the True branch),(1813,deref of variable `rv'),(1813,deref of variable `rv'),(1813,take the False branch),1837,1832,1828,1824,(1820,take the True branch),(1821,cmp_nonnull of variable `rv'),(1821,take the True branch),(1821,deref of variable `rv'),(1821,deref of variable `rv'),(1821,take the False branch),(1822,take the True branch),(1822,deref of variable `rv'),(1822,deref of variable `rv'),(1822,take the True branch),(1825,take the False branch),(1825,take the False branch),(1826,take the True branch),(1827,deref of variable `rv'),(1827,deref of variable `rv'),(1827,take the True branch),(1831,take the False branch),(1831,take the False branch),(1831,take the True branch),(1834,take the False branch),(1834,take the True branch),(1837,take the False branch),(1837,take the False branch),(1838,deref of variable `rv'),(1838,deref of variable `rv'),(1837,take the False branch),1846,1847,1850,1851,(1852,take the True branch),(1852,write of variable `rv'),(1853,take the False branch),(1859,take the True branch),(1859,take the True branch),(1859,take the True branch),(1860,write of variable `rv'),(1861,take the True branch),(1861,cmp_nonnull of variable `rv'),(1861,take the False branch),(1862,write of variable `rv'),(1866,take the False branch),(1870,take the False branch),(1873,take the False branch),(1884,take the False branch),(1892,take the True branch),1894,(1898,take the True branch),1899,1900,1901,(1905,take the True branch),(1905,take the True branch),(1910,take the True branch),1911,(1914,deref of variable `rv')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Variable `rv' is assigned NULL, then possibly dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="162">
  <name>
   PTR-null-assign-pos
  </name>
  <location line="1578" path="chrome-5.0.375.70/third_party/sqlite/src/main.c">
   <explanation>
   function or method: openDatabase
   line-by-line trace: 1528,1529,1530,1532,1534,(1535,take the False branch),(1538,take the True branch),1539,(1547,take the True branch),1548,1561,1562,1563,1564,1565,1566,1567,1568,1569,1570,1561,(1575,write of variable `db'),(1576,take the False branch),(1577,take the True branch),(1578,deref of variable `db'),(1579,deref of variable `db'),(1579,take the True branch),1580,(1581,write of variable `db'),1582,1734,(1735,take the False branch),1739,(1740,take the False branch),(1743,take the True branch),(1744,deref of variable `db')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Variable `db' is assigned NULL, then possibly dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="163">
  <name>
   PTR-null-assign-pos
  </name>
  <location line="746" path="chrome-5.0.375.70/webkit/glue/plugins/webplugin_impl.cc">
   <explanation>
   function or method: webkit_glue::WebPluginImpl::didReceiveResponse
   line-by-line trace: 735,736,(738,write of variable `client'),(739,take the False branch),742,743,745,(746,deref of variable `client'),(746,take the True branch),(747,take the False branch),(750,take the True branch),(760,take the False branch),767,769,(770,write of variable `client'),(773,take the False branch),779,(783,take the False branch),791,(793,deref of variable `client')
   </explanation>
  </location>
  <grade severity="1" probability="0.4"/>
  <output>
   <textoutput>
   Variable `client' is assigned NULL, then possibly dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="164">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="164" path="chrome-5.0.375.70/chrome/browser/automation/ui_controls_linux.cc">
   <explanation>
   function or method: ui_controls::SendKeyPress
   line-by-line trace: (165,ptr_decl of variable `this_window'),(165,deref of variable `element'),(166,take the False branch),(164,cmp_nonnull_aux of variable `element'),(164,deref of variable `element'),(164,write of variable `element'),(164,cmp_nonnull_aux of variable `element'),(168,cmp_null of variable `element'),171,(173,take the True branch),(174,take the True branch),175
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `element' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="165">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="144" path="chrome-5.0.375.70/chrome/browser/bookmarks/bookmark_utils.cc">
   <explanation>
   function or method: _GLOBAL__N__17_bookmark_utils_cc_e5f72c00::OpenAllImpl
   line-by-line trace: (144,ptr_decl of variable `current_tab'),(144,deref of variable `new_browser'),(145,cmp_nonnull_aux of variable `new_browser'),(145,cmp_null of variable `new_browser'),(145,take the True branch),(146,cmp_nonnull_aux of variable `new_browser'),153
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `new_browser' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="166">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="14" path="chrome-5.0.375.70/chrome/browser/browser_list_gtk.cc">
   <explanation>
   function or method: BrowserList::AllBrowsersClosed
   line-by-line trace: (15,ptr_decl of variable `window'),(15,deref of variable `i'),19,49,(19,take the True branch),20,(14,cmp_nonnull_aux of variable `i'),(14,deref of variable `i'),(14,write of variable `i'),(14,cmp_nonnull_aux of variable `i'),(22,cmp_null of variable `i'),23
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `i' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="167">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="54" path="chrome-5.0.375.70/chrome/browser/browsing_data_remover.cc">
   <explanation>
   function or method: BrowsingDataRemover::BrowsingDataRemover
   line-by-line trace: 42,(54,deref of variable `profile'),42,(60,cmp_nonnull_aux of variable `profile')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `profile' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="168">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="75" path="chrome-5.0.375.70/chrome/browser/browsing_data_remover.cc">
   <explanation>
   function or method: BrowsingDataRemover::BrowsingDataRemover
   line-by-line trace: 63,67,63,(75,deref of variable `profile'),63,(81,cmp_nonnull_aux of variable `profile'),(81,cmp_null of variable `profile')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `profile' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="169">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="167" path="chrome-5.0.375.70/chrome/browser/download/save_package.cc">
   <explanation>
   function or method: SavePackage::SavePackage
   line-by-line trace: 152,155,152,155,152,155,152,(167,deref of variable `web_content'),152,(169,cmp_nonnull_aux of variable `web_content'),(169,cmp_null of variable `web_content'),170,(171,take the True branch),172,(173,take the True branch),(173,take the True branch),(175,take the True branch),(175,take the False branch),(177,take the False branch),(177,take the False branch),179
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `web_content' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="170">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="556" path="chrome-5.0.375.70/chrome/browser/gtk/accessibility_event_router_gtk.cc">
   <explanation>
   function or method: AccessibilityEventRouterGtk::SendMenuItemNotification
   line-by-line trace: (557,ptr_decl of variable `child'),(557,deref of variable `l'),(558,ptr_decl of variable `__inst'),(558,take the True branch),(558,take the True branch),(558,take the True branch),(558,take the False branch),(556,cmp_nonnull_aux of variable `l'),(556,deref of variable `l'),(556,write of variable `l'),(556,cmp_nonnull_aux of variable `l'),(560,cmp_null of variable `l'),566,567
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `l' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="171">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="595" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_bar_gtk.cc">
   <explanation>
   function or method: BookmarkBarGtk::GetFirstHiddenBookmark
   line-by-line trace: (595,ptr_decl of variable `tool_item'),(595,deref of variable `iter'),(596,take the False branch),600,601,602,601,603,604,603,604,602,600,(606,take the True branch),(608,take the False branch),(611,take the False branch),615,(594,cmp_nonnull_aux of variable `iter'),(594,cmp_null of variable `iter'),(594,write of variable `iter'),(594,cmp_nonnull_aux of variable `iter'),(595,ptr_decl of variable `tool_item'),(595,deref of variable `iter'),(596,take the False branch),600,601,602,601,603,604,603,604,602,600,(606,take the True branch),(608,take the True branch),609,(615,cmp_null of variable `iter'),618,(620,take the True branch),621
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `iter' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="172">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="33" path="chrome-5.0.375.70/chrome/browser/gtk/gtk_floating_container.cc">
   <explanation>
   function or method: _GLOBAL__N__25_gtk_floating_container_cc_c44188b5::GetChild
   line-by-line trace: (32,ptr_decl of variable `child'),(33,deref of variable `floating_children'),32,(35,take the False branch),30,(31,cmp_nonnull_aux of variable `floating_children'),(31,deref of variable `floating_children'),(31,write of variable `floating_children'),(30,cmp_nonnull_aux of variable `floating_children'),(32,ptr_decl of variable `child'),(33,deref of variable `floating_children'),32,(35,take the True branch),36
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `floating_children' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="173">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="227" path="chrome-5.0.375.70/chrome/browser/importer/firefox2_importer.cc">
   <explanation>
   function or method: Firefox2Importer::ImportBookmarksFile
   line-by-line trace: (225,ptr_decl of variable `t_url'),(226,take the True branch),(227,deref of variable `template_urls'),230,244,167,168,(167,take the True branch),(167,take the True branch),169,170,(173,take the False branch),177,178,(177,take the False branch),182,183,184,185,192,191,190,189,188,(190,take the True branch),191,(190,take the True branch),(191,take the True branch),193,(192,take the True branch),(194,take the True branch),(194,take the False branch),199,200,201,202,(204,take the False branch),211,(212,take the True branch),213,214,(219,take the False branch),(222,cmp_nonnull_aux of variable `template_urls'),(225,ptr_decl of variable `t_url'),(226,take the True branch),(227,deref of variable `template_urls'),230,244,167,168,(167,take the True branch),(167,take the True branch),169,170,(173,take the False branch),177,178,(177,take the False branch),182,183,184,185,192,191,190,189,188,(190,take the True branch),191,(190,take the True branch),(191,take the True branch),193,(192,take the False branch),(234,take the False branch),(239,take the True branch),(240,take the True branch),241,244,248,249,248,249
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `template_urls' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="174">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="881" path="chrome-5.0.375.70/chrome/browser/renderer_host/resource_dispatcher_host.cc">
   <explanation>
   function or method: ResourceDispatcherHost::RemovePendingRequest
   line-by-line trace: (872,write of variable `info'),876,(877,deref of variable `info'),(876,deref of variable `info'),(880,cmp_nonnull_aux of variable `info'),(880,deref of variable `info'),(880,take the True branch),(881,deref of variable `info'),882,884,885,(888,take the False branch),889
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `info' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="175">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="119" path="chrome-5.0.375.70/chrome/browser/sessions/session_restore.cc">
   <explanation>
   function or method: _GLOBAL__N__18_session_restore_cc_8f0468cb::TabLoader::LoadTabs
   line-by-line trace: (116,write of variable `tab'),117,(118,deref of variable `tab'),(119,cmp_nonnull_aux of variable `tab'),(119,deref of variable `tab'),(119,take the True branch),120,(121,ptr_decl of variable `browser'),(122,take the False branch),(112,take the True branch),(113,take the False branch),(114,take the False branch),(135,take the True branch),136,137
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `tab' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="176">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="179" path="chrome-5.0.375.70/chrome/browser/toolbar_model.cc">
   <explanation>
   function or method: ToolbarModel::GetInfoText
   line-by-line trace: (178,write of variable `entry'),(179,deref of variable `entry'),181,(180,cmp_null_aux of variable `entry'),(180,take the False branch),181,(180,take the False branch),182,25,(182,take the False branch),185,186,(187,take the False branch),192,193
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `entry' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="177">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="203" path="chrome-5.0.375.70/chrome/common/sqlite_utils.cc">
   <explanation>
   function or method: SQLNestedTransaction::SQLNestedTransaction
   line-by-line trace: 197,(198,deref of variable `site'),197,(201,cmp_nonnull_aux of variable `site'),(202,deref of variable `site'),(202,take the True branch),(203,deref of variable `site')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `site' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="178">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="223" path="chrome-5.0.375.70/chrome/renderer/webgraphicscontext3d_command_buffer_impl.cc">
   <explanation>
   function or method: WebGraphicsContext3DCommandBufferImpl::readBackFramebuffer
   line-by-line trace: (201,take the False branch),205,214,(215,take the True branch),216,217,(222,take the True branch),(223,deref of variable `pixels'),(223,deref of variable `pixels'),(222,take the False branch),(226,take the False branch),(231,cmp_nonnull_aux of variable `pixels'),236
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `pixels' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="179">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="435" path="chrome-5.0.375.70/native_client/src/trusted/plugin/srpc/plugin.cc">
   <explanation>
   function or method: nacl_srpc::Plugin::Load
   line-by-line trace: (433,ptr_decl of variable `elf_hdr_buf'),434,(435,deref of variable `shmbufp'),(436,take the True branch),437,(441,take the False branch),446,(448,take the False branch),453,(454,cmp_null_aux of variable `shmbufp'),(454,cmp_null of variable `shmbufp'),455,(469,take the False branch),(475,take the True branch),(475,take the True branch),476,(477,take the True branch),(477,take the False branch),479,(480,take the True branch),(480,take the True branch),484,485
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `shmbufp' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="180">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="906" path="chrome-5.0.375.70/net/base/net_util.cc">
   <explanation>
   function or method: net::IDNToUnicode
   line-by-line trace: (869,cmp_null of variable `offset_for_adjustment'),874,(875,take the True branch),878,(879,take the True branch),880,881,883,884,(885,take the False branch),890,(892,take the True branch),(893,deref of variable `offset_for_adjustment'),(893,take the True branch),(894,deref of variable `offset_for_adjustment'),(894,take the True branch),(894,take the True branch),895,(901,take the True branch),902,874,876,(875,take the False branch),(905,cmp_nonnull_aux of variable `offset_for_adjustment'),(906,deref of variable `offset_for_adjustment'),908
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `offset_for_adjustment' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="181">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="232" path="chrome-5.0.375.70/net/proxy/proxy_service.cc">
   <explanation>
   function or method: net::ProxyService::Create
   line-by-line trace: (231,ptr_decl of variable `sync_host_resolver'),(232,deref of variable `url_request_context'),231,(236,ptr_decl of variable `js_bindings'),243,(252,ptr_decl of variable `proxy_service'),(256,take the True branch),(258,cmp_nonnull_aux of variable `url_request_context'),259,263
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `url_request_context' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="182">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="6411" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3con.c">
   <explanation>
   function or method: ssl3_HandleClientHello
   line-by-line trace: (6302,ptr_decl of variable `pwSpec'),6303,(6305,deref of variable `sid'),(6305,take the False branch),(6306,deref of variable `sid'),(6306,take the False branch),(6310,take the True branch),6311,(6312,take the True branch),(6313,take the True branch),6314,6316,(6320,take the True branch),6321,(6322,deref of variable `sid'),(6322,take the False branch),(6356,take the True branch),(6357,deref of variable `sid'),(6358,deref of variable `sid'),6359,6360,6361,6378,(6379,deref of variable `sid'),(6379,take the True branch),(6380,deref of variable `sid'),6388,(6389,take the True branch),6390,6391,(6393,deref of variable `sid'),(6394,deref of variable `sid'),(6395,deref of variable `sid'),(6396,deref of variable `sid'),6403,(6404,deref of variable `sid'),6403,6409,6408,(6407,cmp_nonnull_aux of variable `sid'),(6408,deref of variable `sid'),(6408,take the True branch),(6409,deref of variable `sid'),(6409,take the True branch),(6409,deref of variable `sid'),(6409,take the True branch),(6411,ptr_decl of variable `sidName'),(6411,deref of variable `sid'),(6412,ptr_decl of variable `pwsName'),(6413,take the True branch),6414,6416,(6417,take the False branch),(6425,take the True branch),(6426,take the True branch),6427,6428,6429,(6432,take the True branch),6434,(6435,take the True branch),6436,6437,6655,(6656,take the True branch),(6657,take the True branch),6658,(6661,take the True branch),(6662,take the True branch),6663,6666,104,6667
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `sid' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="183">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="329" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_SendServerNameXtn
   line-by-line trace: 316,(317,deref of variable `ss'),(317,take the True branch),318,319,(322,cmp_null_aux of variable `ss'),(322,deref of variable `ss'),(322,take the False branch),(322,deref of variable `ss'),(322,take the False branch),(325,deref of variable `ss'),(325,take the False branch),(329,deref of variable `ss'),(330,take the True branch),(330,take the True branch),332,(333,take the False branch),335,(336,take the False branch),338,(339,take the True branch)
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ss' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="184">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3650" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslcon.c">
   <explanation>
   function or method: ssl2_HandleClientHelloMessage
   line-by-line trace: (3650,ptr_decl of variable `derCert'),(3650,deref of variable `serverCert'),(3652,take the True branch),(3654,cmp_null_aux of variable `serverCert'),3658,3659,(3660,take the False branch),3663,3664,3665,3668,3669,3671,3672,3673,3674,3675,(3678,take the True branch),(3679,take the True branch),3680,3682,3684,3685,3686,3687,3686,(3693,take the True branch),3694,3696,3699,(3700,take the True branch),3701,3703,3706,3707,3706,(3709,take the True branch),3710,(3711,take the False branch),(3715,take the True branch),3718,3719,3720,3721,3722,3723,3724,3725,3726,3727,3728,3729,(3730,take the True branch),3731,(3733,take the True branch),3734,3736,3737,3736,(3739,take the True branch),3741,3742,(3743,take the True branch),3744,3772,(3773,take the True branch),(3774,take the True branch),(3776,take the True branch),(3778,take the True branch),104,3779
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `serverCert' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="185">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="719" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsecur.c">
   <explanation>
   function or method: ssl_ConfigSecureServer
   line-by-line trace: (681,ptr_decl of variable `sc'),(684,take the True branch),685,686,687,(690,take the True branch),691,692,(694,take the True branch),695,(697,deref of variable `keyPair'),(698,take the True branch),699,700,699,(702,take the False branch),(705,take the True branch),(707,take the False branch),710,(714,take the True branch),715,716,(718,cmp_nonnull_aux of variable `keyPair'),(719,deref of variable `keyPair'),720,723,(722,take the True branch),(722,take the True branch),(722,take the True branch),(723,take the True branch),(723,take the True branch),(724,take the True branch),725,730,(731,take the True branch),732,(734,take the True branch),735,736,(738,take the True branch),739,740,(742,take the False branch),104,746
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `keyPair' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="186">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="89" path="chrome-5.0.375.70/skia/ext/SkFontHost_fontconfig_ipc.cpp">
   <explanation>
   function or method: FontConfigIPC::Match
   line-by-line trace: (44,take the False branch),47,48,49,(50,take the True branch),51,(53,take the False branch),(54,take the True branch),(54,deref of variable `is_italic'),56,(58,ptr_decl of variable `reply_buf'),59,(61,take the False branch),64,(65,ptr_decl of variable `iter'),66,(67,take the False branch),(69,take the False branch),72,73,74,77,76,(75,take the False branch),(76,take the False branch),(77,take the False branch),(78,take the False branch),82,(83,take the False branch),(86,take the False branch),(88,cmp_nonnull_aux of variable `is_italic'),(89,deref of variable `is_italic'),91
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `is_italic' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="187">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="286" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_RetainObject
   line-by-line trace: (282,cmp_null of variable `npObject'),(282,take the False branch),(283,deref of variable `npObject'),(283,take the False branch),(285,cmp_nonnull_aux of variable `npObject'),(286,deref of variable `npObject'),288
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `npObject' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="188">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="308" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_DeallocateObject
   line-by-line trace: (296,cmp_null of variable `npObject'),(296,take the False branch),(297,deref of variable `npObject'),(297,take the True branch),(297,take the False branch),(299,cmp_nonnull_aux of variable `npObject'),(304,take the True branch),305,(307,deref of variable `npObject'),(308,deref of variable `npObject'),(308,take the False branch),311
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `npObject' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="189">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="321" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_ReleaseObject
   line-by-line trace: (317,cmp_null of variable `npObject'),(317,take the False branch),(318,deref of variable `npObject'),(318,take the False branch),(320,cmp_nonnull_aux of variable `npObject'),(320,deref of variable `npObject'),(320,take the True branch),(321,deref of variable `npObject'),(321,take the True branch),322
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `npObject' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="190">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="146" path="chrome-5.0.375.70/third_party/WebKit/WebCore/css/CSSImportRule.cpp">
   <explanation>
   function or method: WebCore::CSSImportRule::insertedIntoParent
   line-by-line trace: (130,ptr_decl of variable `curr'),(130,take the False branch),(137,deref of variable `parentSheet'),(137,take the False branch),(140,deref of variable `parentSheet'),(141,take the True branch),(145,cmp_nonnull_aux of variable `parentSheet'),(145,deref of variable `parentSheet'),(145,take the True branch),(145,take the True branch),(146,deref of variable `parentSheet'),147,148
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `parentSheet' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="191">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="728" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/ContainerNode.cpp">
   <explanation>
   function or method: WebCore::ContainerNode::getUpperLeftCorner
   line-by-line trace: (719,cmp_null of variable `o'),(719,take the False branch),(721,deref of variable `o'),(721,take the False branch),(721,deref of variable `o'),(721,take the False branch),(726,take the True branch),(726,take the False branch),(728,deref of variable `o'),(728,take the True branch),(728,deref of variable `o'),(728,take the False branch),(728,deref of variable `o'),(728,take the False branch),(702,cmp_nonnull_aux of variable `o'),(737,cmp_null of variable `o'),(743,cmp_null_aux of variable `o'),(743,cmp_null of variable `o'),(743,take the True branch),744,745
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `o' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="192">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="773" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/ContainerNode.cpp">
   <explanation>
   function or method: WebCore::ContainerNode::getLowerRightCorner
   line-by-line trace: (756,write of variable `o'),(757,deref of variable `o'),(757,take the False branch),(757,deref of variable `o'),(757,take the False branch),(765,cmp_nonnull_aux of variable `o'),(766,deref of variable `o'),(766,take the False branch),(768,deref of variable `o'),(768,take the False branch),(771,ptr_decl of variable `prev'),(772,take the True branch),(773,deref of variable `o'),(773,write of variable `o'),(774,cmp_null_aux of variable `o'),(774,cmp_null of variable `o'),775
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `o' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="193">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2177" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Document.cpp">
   <explanation>
   function or method: WebCore::Document::nextFocusableNode
   line-by-line trace: (2166,ptr_decl of variable `winner'),(2166,deref of variable `start'),(2166,deref of variable `start'),(2166,take the False branch),(2169,deref of variable `start'),(2169,take the False branch),(2177,ptr_decl of variable `winner'),(2177,cmp_nonnull_aux of variable `start'),(2177,deref of variable `start'),(2177,take the True branch),2178
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `start' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="194">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="149" path="chrome-5.0.375.70/third_party/WebKit/WebCore/html/HTMLParser.cpp">
   <explanation>
   function or method: WebCore::HTMLParser::HTMLParser
   line-by-line trace: 148,(149,deref of variable `frag'),148,149,163,(149,take the True branch),163,149,148,(165,cmp_nonnull_aux of variable `frag'),166
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `frag' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="195">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="873" path="chrome-5.0.375.70/third_party/WebKit/WebCore/inspector/InspectorDOMAgent.cpp">
   <explanation>
   function or method: WebCore::InspectorDOMAgent::buildArrayForCSSRules
   line-by-line trace: (874,ptr_decl of variable `rule'),(874,deref of variable `matchedRules'),(875,take the True branch),876,(873,cmp_nonnull_aux of variable `matchedRules'),(873,deref of variable `matchedRules'),(873,take the False branch),(878,cmp_null of variable `matchedRules')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `matchedRules' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="196">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="66" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/DocumentThreadableLoader.cpp">
   <explanation>
   function or method: WebCore::DocumentThreadableLoader::DocumentThreadableLoader
   line-by-line trace: 62,(66,deref of variable `document'),62,67,62,(69,cmp_null_aux of variable `document'),(69,cmp_null of variable `document'),(69,take the False branch),(70,take the True branch),(70,take the False branch),(72,take the True branch),73,74
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `document' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="197">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="408" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/FontCache.cpp">
   <explanation>
   function or method: WebCore::FontCache::getFontData
   line-by-line trace: (384,ptr_decl of variable `data'),(384,deref of variable `fontSelector'),(385,take the False branch),388,390,(380,take the False branch),(393,take the True branch),394,(396,take the True branch),400,(402,take the True branch),(402,take the True branch),(406,cmp_nonnull_aux of variable `fontSelector'),(408,ptr_decl of variable `data'),(408,deref of variable `fontSelector'),(408,take the True branch),409
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `fontSelector' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="198">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="145" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBox.cpp">
   <explanation>
   function or method: WebCore::RenderBox::styleWillChange
   line-by-line trace: 128,(130,take the True branch),(133,take the False branch),(139,take the True branch),(139,take the True branch),(139,deref of variable `newStyle'),(139,take the True branch),140,(141,take the True branch),142,(145,take the True branch),(145,take the True branch),(145,deref of variable `newStyle'),(145,take the True branch),146,(149,ptr_decl of variable `frameView'),(149,take the True branch),(150,cmp_nonnull_aux of variable `newStyle'),(150,cmp_null of variable `newStyle'),(151,take the False branch),(152,take the True branch),(153,take the True branch),154,160
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `newStyle' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="199">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="324" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderLayer.cpp">
   <explanation>
   function or method: WebCore::RenderLayer::updateLayerPositions
   line-by-line trace: (313,cmp_null of variable `view'),(313,take the False branch),(316,deref of variable `view'),(316,take the True branch),(316,take the False branch),(318,ptr_decl of variable `repaintContainer'),319,320,323,303,(323,take the True branch),(324,cmp_nonnull_aux of variable `view'),(324,deref of variable `view'),(324,take the True branch),(325,take the False branch),330,333,334,340,(343,take the True branch),344,(353,ptr_decl of variable `child'),(353,take the False branch),(362,take the True branch),363,(365,take the True branch),366
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `view' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="200">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="193" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObject.cpp">
   <explanation>
   function or method: WebCore::RenderObject::RenderObject
   line-by-line trace: 173,(193,deref of variable `node'),173,215,(217,cmp_null_aux of variable `node'),(217,cmp_null of variable `node'),(217,take the False branch)
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `node' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="201">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1398" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObject.cpp">
   <explanation>
   function or method: WebCore::RenderObject::showRenderTreeAndMark
   line-by-line trace: 1386,(1387,take the True branch),(1387,take the True branch),1388,(1389,take the True branch),(1389,take the True branch),1390,(1391,take the False branch),(1394,deref of variable `this'),(1395,cmp_null_aux of variable `this'),(1398,ptr_decl of variable `child'),(1398,deref of variable `this'),(1398,take the False branch),1399
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `this' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="202">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1632" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObject.cpp">
   <explanation>
   function or method: WebCore::RenderObject::styleWillChange
   line-by-line trace: (1614,ptr_decl of variable `l'),(1614,take the True branch),(1615,deref of variable `newStyle'),(1615,take the True branch),1616,(1626,take the True branch),(1626,take the True branch),1627,(1628,take the False branch),(1632,take the True branch),(1632,deref of variable `newStyle'),(1632,take the True branch),1635,1637,1639,(1637,take the False branch),(1642,take the True branch),1643,1644,1645,1647,1648,1649,1650,(1654,take the True branch),1658,(1667,cmp_nonnull_aux of variable `newStyle'),(1667,cmp_null of variable `newStyle'),(1669,take the False branch),(1672,take the False branch),1676
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `newStyle' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="203">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="454" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebViewImpl.cpp">
   <explanation>
   function or method: WebKit::WebViewImpl::mouseUp
   line-by-line trace: (446,ptr_decl of variable `view'),447,448,(449,deref of variable `focused'),(453,take the True branch),(453,take the True branch),(453,cmp_nonnull_aux of variable `focused'),(453,take the True branch),(454,ptr_decl of variable `editor'),(454,deref of variable `focused'),(455,ptr_decl of variable `pasteboard'),456,457,458,459,464,465,464,465
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `focused' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="204">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2388" path="chrome-5.0.375.70/third_party/cld/encodings/compact_lang_det/compact_lang_det_impl.cc">
   <explanation>
   function or method: CompactLangDetImpl::DetectLanguageSummaryV25
   line-by-line trace: (2371,ptr_decl of variable `reliable_percent3'),2375,2377,2381,(2382,take the False branch),(2385,take the False branch),(2388,deref of variable `is_reliable'),(2389,take the True branch),2390,(2397,take the True branch),2401,2404,2405,2470,2471,2473,2471,(2475,take the True branch),(2476,take the False branch),2485,2486,(2487,cmp_nonnull_aux of variable `is_reliable'),2486,2488,2491
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `is_reliable' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="205">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1248" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/imgconvert.c">
   <explanation>
   function or method: av_picture_pad
   line-by-line trace: (1244,ptr_decl of variable `iptr'),(1244,deref of variable `src'),1245,1246,1245,1247,(1248,deref of variable `src'),1249,1250,1249,1251,(1252,take the False branch),(1261,take the False branch),(1261,take the False branch),(1224,take the True branch),(1225,take the True branch),(1226,take the True branch),(1228,take the False branch),(1228,take the False branch),(1233,take the False branch),(1233,take the False branch),(1243,cmp_nonnull_aux of variable `src'),(1244,ptr_decl of variable `iptr'),(1244,deref of variable `src'),1245,1246,1245,1247,(1248,deref of variable `src'),1249,1250,1249,1251,(1252,take the False branch),(1261,take the False branch),(1261,take the False branch),(1224,take the False branch),1268
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `src' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="206">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="155" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-buffer.c">
   <explanation>
   function or method: hb_buffer_free
   line-by-line trace: (152,deref of variable `buffer'),(152,take the False branch),(153,deref of variable `buffer'),(153,take the True branch),(153,deref of variable `buffer'),(153,deref of variable `buffer'),(154,deref of variable `buffer'),(155,deref of variable `buffer'),(155,take the True branch),(155,deref of variable `buffer'),(155,deref of variable `buffer'),(156,cmp_nonnull_aux of variable `buffer')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `buffer' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="207">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="207" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gdef.c">
   <explanation>
   function or method: HB_Done_GDEF_Table
   line-by-line trace: (204,deref of variable `gdef'),(205,deref of variable `gdef'),(206,deref of variable `gdef'),(207,deref of variable `gdef'),209,(211,cmp_nonnull_aux of variable `gdef'),213
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `gdef' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="208">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="100" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gpos.c">
   <explanation>
   function or method: HB_Load_GPOS_Table
   line-by-line trace: (97,write of variable `gpos'),(97,take the False branch),(100,deref of variable `gpos'),(104,take the True branch),106,166,(167,cmp_nonnull_aux of variable `gpos'),(167,write of variable `gpos'),169
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `gpos' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="209">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="177" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gpos.c">
   <explanation>
   function or method: HB_Done_GPOS_Table
   line-by-line trace: (175,deref of variable `gpos'),(176,deref of variable `gpos'),(177,deref of variable `gpos'),(179,cmp_nonnull_aux of variable `gpos'),(179,write of variable `gpos'),181
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `gpos' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="210">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="916" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gpos.c">
   <explanation>
   function or method: Load_SinglePos
   line-by-line trace: (912,write of variable `vr'),(914,take the True branch),(916,deref of variable `vr'),(917,take the True branch),918,928,(929,take the False branch),(932,cmp_nonnull_aux of variable `vr'),(932,write of variable `vr'),934,935,936
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `vr' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="211">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1270" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gpos.c">
   <explanation>
   function or method: Load_PairPos2
   line-by-line trace: (1261,write of variable `c1r'),(1263,take the True branch),(1265,deref of variable `c1r'),(1267,deref of variable `c1r'),(1267,take the False branch),(1270,deref of variable `c1r'),(1272,take the True branch),(1274,take the True branch),1276,(1278,take the False branch),(1281,take the True branch),1283,(1285,take the True branch),(1287,take the True branch),1288,1289,1296,(1297,take the False branch),1304,1309,(1310,take the False branch),(1325,cmp_nonnull_aux of variable `c1r'),(1325,write of variable `c1r'),1326,1328,1330,1331,1332
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `c1r' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="212">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2332" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gpos.c">
   <explanation>
   function or method: Load_LigatureAttach
   line-by-line trace: (2323,write of variable `cr'),(2325,take the True branch),(2327,deref of variable `cr'),(2329,deref of variable `cr'),(2329,take the False branch),(2332,deref of variable `cr'),(2334,take the True branch),(2336,take the True branch),2337,2358,(2359,take the False branch),2361,2366,(2367,take the False branch),(2377,cmp_nonnull_aux of variable `cr'),2378
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `cr' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="213">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3866" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gpos.c">
   <explanation>
   function or method: Lookup_ContextPos2
   line-by-line trace: (3857,write of variable `classes'),(3857,take the False branch),3860,(3861,deref of variable `classes'),3860,(3862,take the False branch),3864,(3866,deref of variable `classes'),(3867,take the True branch),3869,3870,3925,(3926,cmp_nonnull_aux of variable `classes'),(3926,write of variable `classes'),3927
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `classes' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="214">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="146" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: HB_Done_GSUB_Table
   line-by-line trace: (144,deref of variable `gsub'),(145,deref of variable `gsub'),(146,deref of variable `gsub'),(148,cmp_nonnull_aux of variable `gsub'),150
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `gsub' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="215">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1911" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_ContextSubst2
   line-by-line trace: (1902,write of variable `classes'),(1902,take the False branch),1905,(1906,deref of variable `classes'),1905,(1907,take the False branch),1909,(1911,deref of variable `classes'),(1912,take the True branch),1914,1915,1970,(1971,cmp_nonnull_aux of variable `classes'),(1971,write of variable `classes'),1972
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `classes' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="216">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3553" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::parse_convtable
   line-by-line trace: (3505,ptr_decl of variable `piece'),3506,3507,3508,3509,(3510,take the True branch),(3511,take the True branch),3512,3514,3515,(3516,take the False branch),(3520,deref of variable `rl'),(3521,cmp_null_aux of variable `rl'),3522,3523,3525,3527,3529,(3510,take the False branch),(3531,take the False branch),(3537,ptr_decl of variable `nl'),(3538,take the True branch),(3539,take the False branch),3540,3541,3542,(3543,ptr_decl of variable `pattern'),(3544,ptr_decl of variable `pattern2'),3545,(3546,take the True branch),(3547,take the True branch),3548,3549,(3550,take the True branch),3551,(3552,deref of variable `rl'),(3553,deref of variable `rl'),3554
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `rl' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="217">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="347" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/csutil.cxx">
   <explanation>
   function or method: line_uniq
   line-by-line trace: (345,write of variable `lines'),346,(347,deref of variable `lines'),(348,take the False branch),(360,take the False branch),(363,cmp_nonnull_aux of variable `lines'),364
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `lines' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="218">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1924" path="chrome-5.0.375.70/third_party/icu/source/common/uloc_tag.c">
   <explanation>
   function or method: ultag_parse
   line-by-line trace: (1612,write of variable `t'),1613,(1614,deref of variable `t'),(1615,cmp_null_aux of variable `t'),(1621,take the False branch),(1627,take the False branch),1648,1649,1650,1651,1652,1653,1654,(1656,take the True branch),(1657,ptr_decl of variable `pSep'),1659,1662,(1663,take the False branch),1667,(1669,take the True branch),1671,1675,(1677,take the False branch),(1687,take the True branch),(1688,take the False branch),(1701,take the False branch),(1711,take the False branch),(1721,take the True branch),(1722,take the False branch),(1744,take the True branch),(1745,take the False branch),(1795,take the False branch),(1832,take the True branch),(1833,take the True branch),(1834,ptr_decl of variable `pPrivuseVal'),(1836,take the True branch),(1838,take the False branch),1844,(1847,deref of variable `t'),(1847,take the True branch),1848,1849,1850,(1862,take the True branch),1864,1903,(1906,take the True branch),(1908,take the True branch),1910,(1923,take the True branch),(1924,deref of variable `t'),1927
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `t' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="219">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="192" path="chrome-5.0.375.70/third_party/icu/source/common/uniset_props.cpp">
   <explanation>
   function or method: icu_4_2::UnicodeSet::getInclusions
   line-by-line trace: (150,write of variable `incl'),151,(159,deref of variable `incl'),(160,cmp_nonnull_aux of variable `incl'),161,168,169,170,171,188,(190,take the True branch),(192,deref of variable `incl'),193,(194,take the True branch),195,(196,write of variable `incl'),197,199,201,206
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `incl' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="220">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="545" path="chrome-5.0.375.70/third_party/icu/source/common/uniset_props.cpp">
   <explanation>
   function or method: icu_4_2::UnicodeSet::applyPattern
   line-by-line trace: (545,ptr_decl of variable `m'),(545,deref of variable `symbols'),(546,take the True branch),(547,take the False branch),553,554,(564,take the True branch),(565,take the True branch),(566,take the False branch),571,572,573,574,(577,take the True branch),578,(581,take the True branch),(583,take the False branch),587,589,593,594,595,(596,take the False branch),597,600,603,(605,take the False branch),612,619,620,621,624,625,627,804,(484,take the True branch),(484,take the True branch),490,491,(492,ptr_decl of variable `nested'),497,(498,take the False branch),512,513,(514,take the False branch),(516,take the False branch),(544,cmp_nonnull_aux of variable `symbols'),(545,ptr_decl of variable `m'),(545,deref of variable `symbols'),(546,take the True branch),(547,take the False branch),553,554,(564,take the True branch),(565,take the True branch),(566,take the False branch),571,572,573,574,(577,take the True branch),578,(581,take the True branch),(583,take the False branch),587,589,593,594,595,(596,take the False branch),597,600,603,(605,take the False branch),612,619,620,621,624,625,627,804,(484,take the True branch),(484,take the True branch),490,491,(492,ptr_decl of variable `nested'),497,(498,take the False branch),512,513,(514,take the False branch),(516,take the True branch),(516,take the True branch),(517,take the False branch),522,523,524,525,(526,take the False branch),(527,take the True branch),(527,take the True branch),528,529,530,531,(532,take the True branch)
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `symbols' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="221">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3081" path="chrome-5.0.375.70/third_party/icu/source/i18n/decimfmt.cpp">
   <explanation>
   function or method: icu_4_2::DecimalFormat::expandAffix
   line-by-line trace: (3080,ptr_decl of variable `pluralCountChar'),(3081,deref of variable `pluralCount'),(3081,take the True branch),3082,3171,3175,(3045,take the True branch),3046,(3047,take the False branch),(3048,take the True branch),3049,(3050,take the True branch),3051,3052,(3058,take the False branch),3060,(3061,take the True branch),3062,(3063,take the False branch),(3065,take the True branch),3066,3067,(3070,ptr_decl of variable `currencyUChars'),(3071,take the True branch),3072,(3073,take the True branch),(3073,cmp_nonnull_aux of variable `pluralCount'),(3090,cmp_null of variable `pluralCount'),(3091,take the False branch),3094,3095,(3097,ptr_decl of variable `s'),3098,(3097,take the True branch),(3099,take the True branch),(3104,take the False branch),(3132,take the True branch),3133,(3134,take the True branch),3135,3137,3144,3175,(3045,take the False branch),3175
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `pluralCount' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="222">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="449" path="chrome-5.0.375.70/third_party/icu/source/i18n/dtitvfmt.cpp">
   <explanation>
   function or method: icu_4_2::DateIntervalFormat::DateIntervalFormat
   line-by-line trace: (432,ptr_decl of variable `dtfmt'),(432,deref of variable `skeleton'),(434,take the False branch),(440,take the False branch),(440,take the False branch),(440,take the False branch),(448,cmp_nonnull_aux of variable `skeleton'),(449,deref of variable `skeleton'),451,452,(453,take the False branch),457,458,460
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `skeleton' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="223">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1143" path="chrome-5.0.375.70/third_party/icu/source/i18n/nfrule.cpp">
   <explanation>
   function or method: icu_4_2::NFRule::prefixLength
   line-by-line trace: (1143,ptr_decl of variable `prefixIter'),(1143,deref of variable `collator'),(1145,cmp_null_aux of variable `collator'),(1145,take the False branch),(1145,take the False branch),1153,1173,1174,(1176,take the True branch),1178,1179,(1178,take the False branch),1184,1185,(1184,take the False branch),(1195,take the False branch),(1201,take the False branch),(1211,take the True branch),1212,1213,1214
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `collator' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="224">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1444" path="chrome-5.0.375.70/third_party/icu/source/i18n/nfrule.cpp">
   <explanation>
   function or method: icu_4_2::NFRule::allIgnorable
   line-by-line trace: (1444,ptr_decl of variable `iter'),(1444,deref of variable `collator'),(1447,cmp_null_aux of variable `collator'),(1447,take the True branch),(1447,cmp_null of variable `collator'),1448,1449,1450,1451
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `collator' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="225">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="332" path="chrome-5.0.375.70/third_party/icu/source/i18n/repattrn.cpp">
   <explanation>
   function or method: icu_4_2::RegexPattern::matcher
   line-by-line trace: (331,write of variable `retMatcher'),(332,deref of variable `retMatcher'),(333,cmp_nonnull_aux of variable `retMatcher'),336
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `retMatcher' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="226">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1647" path="chrome-5.0.375.70/third_party/icu/source/i18n/vtzone.cpp">
   <explanation>
   function or method: icu_4_2::VTimeZone::parse
   line-by-line trace: (1342,write of variable `rules'),(1343,take the False branch),(1347,deref of variable `rules'),1349,(1350,take the False branch),(1353,cmp_null_aux of variable `rules'),(1353,take the False branch),(1358,take the False branch),(1543,deref of variable `rules'),(1543,take the False branch),1548,1549,(1551,take the False branch),1557,(1558,take the False branch),1562,(1564,deref of variable `rules'),(1564,take the False branch),(1573,take the False branch),(1579,take the True branch),(1580,deref of variable `rules'),(1580,take the False branch),(1587,ptr_decl of variable `finalRule'),(1587,deref of variable `rules'),1588,1589,1592,1593,1594,(1595,deref of variable `rules'),(1595,take the False branch),(1611,ptr_decl of variable `newRule'),1612,(1613,take the True branch),1615,1619,1618,1615,1617,1615,1616,1615,(1634,take the False branch),(1638,deref of variable `rules'),(1639,deref of variable `rules'),(1640,take the False branch),(1647,deref of variable `rules'),(1647,take the False branch),1654,(1655,take the False branch),1658,1659,1661,1662,1663
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `rules' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="227">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2263" path="chrome-5.0.375.70/third_party/libxml/encoding.c">
   <explanation>
   function or method: xmlCharEncOutFunc
   line-by-line trace: (2263,ptr_decl of variable `utf'),(2263,deref of variable `in'),2264,2266,(2267,take the True branch),(2268,ptr_decl of variable `charref'),2283,2284,2285,2287,2129,2131,(2133,take the True branch),2134,(2139,cmp_null_aux of variable `in'),(2139,cmp_null of variable `in'),2140,(2141,take the True branch),2142,2143,2142,(2144,take the True branch),2145,2146,2170
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `in' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="228">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="98" path="chrome-5.0.375.70/third_party/libxml/hash.c">
   <explanation>
   function or method: xmlHashComputeQKey
   line-by-line trace: 92,93,(95,take the False branch),(98,deref of variable `name'),(100,take the True branch),(101,take the False branch),104,(106,cmp_nonnull_aux of variable `name'),(111,take the True branch),(112,take the False branch),115,(117,take the False branch),(122,take the True branch),(123,take the False branch),126,(128,take the True branch),(129,take the False branch),133
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `name' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="229">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="169" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlErrAttributeDup
   line-by-line trace: (155,take the True branch),156,(157,deref of variable `ctxt'),156,(166,cmp_nonnull_aux of variable `ctxt'),(167,deref of variable `ctxt'),(168,deref of variable `ctxt'),(168,take the True branch),(169,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="230">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="467" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlValidityError
   line-by-line trace: 460,(461,deref of variable `ctxt'),(461,deref of variable `ctxt'),460,(466,cmp_nonnull_aux of variable `ctxt'),(467,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="231">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="591" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlNextChar
   line-by-line trace: (466,ptr_decl of variable `cur'),467,(475,deref of variable `ctxt'),(475,take the True branch),(476,deref of variable `ctxt'),(476,deref of variable `ctxt'),(491,deref of variable `ctxt'),493,(494,take the True branch),(495,take the True branch),496,567,(575,cmp_null_aux of variable `ctxt'),(575,deref of variable `ctxt'),(575,take the False branch),(576,deref of variable `ctxt'),(576,deref of variable `ctxt'),(576,take the False branch),(581,ptr_decl of variable `buffer'),583,(585,deref of variable `ctxt'),(585,deref of variable `ctxt'),(584,deref of variable `ctxt'),(584,deref of variable `ctxt'),583,586,(590,deref of variable `ctxt'),(591,deref of variable `ctxt'),592
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="232">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1162" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGFreeStates
   line-by-line trace: (1147,ptr_decl of variable `tmp'),1149,(1150,deref of variable `ctxt'),(1149,deref of variable `ctxt'),(1153,take the False branch),(1159,deref of variable `ctxt'),(1160,deref of variable `ctxt'),(1160,deref of variable `ctxt'),(1162,cmp_null_aux of variable `ctxt'),(1162,deref of variable `ctxt'),(1162,take the True branch),(1162,cmp_null of variable `ctxt'),1163,1164,1166
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="233">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="6043" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGSimplify
   line-by-line trace: (6011,cmp_null of variable `parent'),(6011,take the False branch),(6013,take the True branch),(6014,deref of variable `parent'),6015,6016,6028,(6027,take the False branch),(6031,take the True branch),(6032,cmp_nonnull_aux of variable `parent'),6037,6036,6035,6034,(6033,deref of variable `parent'),(6033,take the False branch),(6034,deref of variable `parent'),(6034,take the False branch),(6035,deref of variable `parent'),(6035,take the False branch),(6036,deref of variable `parent'),(6036,take the False branch),(6037,deref of variable `parent'),(6037,take the False branch),(6038,deref of variable `parent'),(6038,take the False branch),(6042,cmp_nonnull_aux of variable `parent'),(6043,deref of variable `parent'),(6043,take the True branch),6044,6065,(5916,take the False branch),6065
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `parent' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="234">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="8478" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGValidateDatatype
   line-by-line trace: (8464,write of variable `lib'),(8465,deref of variable `lib'),(8465,take the True branch),(8466,take the True branch),(8467,take the True branch),8468,(8469,deref of variable `lib'),8468,8469,8468,(8469,deref of variable `lib'),8468,(8475,take the True branch),8476,(8477,take the True branch),(8477,cmp_nonnull_aux of variable `lib'),(8477,deref of variable `lib'),(8477,take the True branch),(8478,deref of variable `lib'),(8478,deref of variable `lib'),8479
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `lib' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="235">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1418" path="chrome-5.0.375.70/third_party/libxml/schematron.c">
   <explanation>
   function or method: xmlSchematronReportSuccess
   line-by-line trace: (1383,ptr_decl of variable `report'),(1385,take the False branch),(1386,take the False branch),1388,1389,(1390,take the True branch),1391,(1396,take the True branch),1397,(1398,take the True branch),(1399,take the True branch),1400,1405,(1408,deref of variable `ctxt'),28,(1408,take the True branch),(1409,ptr_decl of variable `schannel'),(1410,ptr_decl of variable `channel'),(1411,ptr_decl of variable `data'),(1413,cmp_nonnull_aux of variable `ctxt'),(1414,deref of variable `ctxt'),(1414,take the True branch),(1415,deref of variable `ctxt'),(1418,deref of variable `ctxt'),1421,(1425,take the True branch),1421,(1423,take the True branch),1421,1433,(1435,take the True branch),(1435,take the True branch),1436
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="236">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3766" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlCopyPropInternal
   line-by-line trace: (3745,ptr_decl of variable `tmp'),(3747,deref of variable `cur'),3748,3749,(3750,take the False branch),3762,3761,(3760,take the True branch),(3760,cmp_nonnull_aux of variable `cur'),(3761,take the True branch),(3761,deref of variable `cur'),(3761,take the True branch),(3762,deref of variable `cur'),(3762,take the True branch),(3762,deref of variable `cur'),(3762,take the True branch),(3763,deref of variable `cur'),(3763,deref of variable `cur'),(3763,take the True branch),(3764,ptr_decl of variable `id'),(3766,deref of variable `cur'),(3766,deref of variable `cur'),(3767,take the True branch),3768,3769,3773
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `cur' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="237">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3768" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlCopyPropInternal
   line-by-line trace: (3699,ptr_decl of variable `ns'),(3701,deref of variable `target'),(3702,take the False branch),(3729,take the True branch),3731,(3744,take the True branch),(3745,ptr_decl of variable `tmp'),3747,3748,3749,(3750,take the False branch),3762,3761,(3760,cmp_nonnull_aux of variable `target'),(3760,take the True branch),(3761,deref of variable `target'),(3761,take the True branch),(3761,take the True branch),(3762,take the True branch),(3762,take the True branch),(3763,take the True branch),(3764,ptr_decl of variable `id'),3766,(3767,take the True branch),(3768,deref of variable `target'),3769,3773
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `target' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="238">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3977" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlStaticCopyNode
   line-by-line trace: (3948,ptr_decl of variable `root'),(3950,take the False branch),(3951,deref of variable `ret'),(3960,take the True branch),(3960,take the True branch),(3961,deref of variable `ret'),(3962,take the False branch),(3975,take the True branch),(3975,take the True branch),(3976,deref of variable `ret'),(3977,cmp_nonnull_aux of variable `ret'),(3977,ptr_decl of variable `ulccur'),(3977,deref of variable `ret'),(3977,take the True branch),(3977,deref of variable `ret'),3980,(3982,take the True branch),(3983,take the True branch),(3983,take the True branch),3984,3985
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ret' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="239">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="5423" path="chrome-5.0.375.70/third_party/libxml/valid.c">
   <explanation>
   function or method: xmlValidateElementContent
   line-by-line trace: (5178,ptr_decl of variable `exec'),(5180,take the False branch),(5183,deref of variable `ctxt'),(5184,deref of variable `ctxt'),(5185,deref of variable `ctxt'),5186,(5187,take the True branch),5188,(5189,take the True branch),5190,5212,(5213,take the True branch),(5213,take the True branch),(5214,ptr_decl of variable `fn'),(5215,ptr_decl of variable `fullname'),5217,5218,5217,(5219,take the True branch),5220,5221,5245,5246,(5365,take the True branch),(5365,take the True branch),(5365,take the True branch),(5366,cmp_nonnull_aux of variable `ctxt'),(5389,cmp_null of variable `ctxt'),(5390,take the True branch),5391,5400,(5402,take the True branch),5403,(5421,deref of variable `ctxt'),(5422,deref of variable `ctxt'),(5423,deref of variable `ctxt'),(5423,take the False branch),5427
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="240">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1120" path="chrome-5.0.375.70/third_party/libxml/xinclude.c">
   <explanation>
   function or method: xmlXIncludeCopyXPointer
   line-by-line trace: (1116,ptr_decl of variable `last'),1117,(1119,take the True branch),(1120,deref of variable `ctxt'),(1121,cmp_null_aux of variable `ctxt'),(1121,take the False branch),(1121,take the False branch),(1122,take the False branch),1124,1125,(1126,ptr_decl of variable `set'),(1127,take the True branch),1128
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="241">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="282" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderFreeProp
   line-by-line trace: (259,ptr_decl of variable `dict'),(261,deref of variable `reader'),(262,take the False branch),(264,take the True branch),(264,take the True branch),265,(268,take the True branch),(268,take the True branch),(269,take the True branch),(271,take the True branch),272,(274,take the True branch),275,(277,take the False branch),(278,cmp_nonnull_aux of variable `reader'),(278,deref of variable `reader'),(278,take the True branch),(279,deref of variable `reader'),(279,take the True branch),(280,deref of variable `reader'),(281,deref of variable `reader'),(282,deref of variable `reader'),284
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `reader' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="242">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="319" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderFreeNodeList
   line-by-line trace: (317,ptr_decl of variable `dict'),(319,deref of variable `reader'),(320,take the False branch),(321,take the False branch),(325,take the False branch),(326,take the False branch),(330,take the True branch),331,(333,take the True branch),(335,take the True branch),(336,take the True branch),(337,take the True branch),338,339,(342,take the False branch),347,346,(345,take the True branch),(348,take the True branch),349,353,352,351,(350,take the True branch),(351,take the True branch),(352,take the True branch),(353,take the True branch),(354,take the True branch),(355,take the False branch),359,358,(357,take the True branch),(360,take the True branch),361,(366,take the True branch),(367,take the True branch),(368,take the True branch),(368,take the True branch),371,370,(369,take the True branch),(371,cmp_nonnull_aux of variable `reader'),(376,cmp_null of variable `reader'),377,380,(330,take the False branch),380
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `reader' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="243">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="451" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderFreeNode
   line-by-line trace: (394,ptr_decl of variable `dict'),(396,deref of variable `reader'),(397,take the False branch),(401,take the False branch),(405,take the False branch),(410,take the True branch),(411,take the True branch),(412,take the True branch),413,414,(417,take the True branch),(417,take the True branch),418,422,421,(420,take the True branch),(423,take the True branch),424,428,427,426,(425,take the True branch),(426,take the True branch),(427,take the True branch),(428,take the True branch),(429,take the True branch),(430,take the True branch),(430,take the False branch),(430,take the True branch),434,433,(432,take the True branch),(435,take the True branch),436,(441,take the True branch),(442,take the True branch),(443,take the True branch),(443,take the True branch),447,446,(445,take the True branch),(447,cmp_nonnull_aux of variable `reader'),(447,deref of variable `reader'),(447,take the True branch),(448,deref of variable `reader'),(448,take the True branch),(449,deref of variable `reader'),(450,deref of variable `reader'),(451,deref of variable `reader'),453
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `reader' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="244">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1762" path="chrome-5.0.375.70/third_party/libxml/xmlschemas.c">
   <explanation>
   function or method: xmlSchemaFormatItemForReport
   line-by-line trace: (1739,ptr_decl of variable `elem'),(1741,deref of variable `itemNode'),(1741,take the True branch),(1742,deref of variable `itemNode'),1745,(1746,take the True branch),1747,1748,1747,(1749,take the True branch),1752,(1755,cmp_nonnull_aux of variable `itemNode'),(1755,deref of variable `itemNode'),(1755,take the True branch),1756,(1757,deref of variable `itemNode'),(1757,take the False branch),(1762,deref of variable `itemNode'),1763,(1765,take the True branch),1767
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `itemNode' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="245">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2566" path="chrome-5.0.375.70/third_party/libxml/xmlschemas.c">
   <explanation>
   function or method: xmlSchemaComplexTypeErr
   line-by-line trace: (2553,write of variable `localName'),2554,(2560,take the True branch),2561,(2566,take the False branch),(2566,take the False branch),(2566,deref of variable `localName'),(2566,take the False branch),(2588,cmp_nonnull_aux of variable `localName'),(2588,write of variable `localName'),2589,2596,(2537,take the False branch),2598,2599,(2600,take the True branch),2603,2604
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `localName' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="246">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2839" path="chrome-5.0.375.70/third_party/libxml/xmlschemas.c">
   <explanation>
   function or method: xmlSchemaPCustomAttrErr
   line-by-line trace: (2834,ptr_decl of variable `des'),(2836,take the False branch),(2838,take the True branch),(2839,deref of variable `attr'),2840,(2843,cmp_null_aux of variable `attr'),(2843,cmp_null of variable `attr'),2844,(2853,take the False branch),2854
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `attr' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="247">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2823" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaValAtomicType
   line-by-line trace: (2805,ptr_decl of variable `ent'),2807,(2808,take the True branch),(2809,deref of variable `node'),2810,(2814,take the True branch),2817,(2819,take the True branch),(2819,take the True branch),2820,(2822,take the True branch),(2822,cmp_nonnull_aux of variable `node'),(2823,deref of variable `node'),(2823,take the True branch),(2824,ptr_decl of variable `attr'),2826,2828,3297,(3298,take the True branch),3299,3300
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `node' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="248">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="8687" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNameFunction
   line-by-line trace: (8684,ptr_decl of variable `cur'),(8686,take the True branch),8687,(8688,deref of variable `ctxt'),(8687,deref of variable `ctxt'),8689,(8692,cmp_null_aux of variable `ctxt'),(8692,take the True branch)
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="249">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="13854" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEval
   line-by-line trace: (13853,ptr_decl of variable `rloc'),(13854,deref of variable `res'),13853,(13855,take the False branch),(13876,cmp_nonnull_aux of variable `res'),13877,(13879,take the True branch),(13880,write of variable `res'),13881,13884,(13830,take the True branch),13835,13836,13837,13838,13839,13838,13840,(13842,take the True branch),13843,13845,13843,(13846,take the True branch),13847,13848
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `res' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="250">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2334" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrAdvanceNode
   line-by-line trace: (2328,cmp_null of variable `cur'),2332,2331,2330,(2329,deref of variable `cur'),(2329,take the True branch),(2330,deref of variable `cur'),(2330,take the True branch),(2331,deref of variable `cur'),(2331,take the True branch),(2332,deref of variable `cur'),(2332,take the True branch),(2333,deref of variable `cur'),(2333,take the True branch),(2334,deref of variable `cur'),(2334,take the False branch),2338,2303,(2304,cmp_null_aux of variable `cur'),(2305,cmp_null of variable `cur')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `cur' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="251">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="666" path="chrome-5.0.375.70/third_party/libxslt/libxslt/attributes.c">
   <explanation>
   function or method: xsltAttributeInternal
   line-by-line trace: (657,ptr_decl of variable `attr'),(659,take the False branch),(659,take the False branch),(659,take the False branch),(666,deref of variable `comp'),(666,take the False branch),(681,cmp_null_aux of variable `comp'),(691,take the True branch),692
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `comp' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="252">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="985" path="chrome-5.0.375.70/third_party/libxslt/libxslt/numbers.c">
   <explanation>
   function or method: xsltFormatNumberConversion
   line-by-line trace: (951,ptr_decl of variable `nsuffix'),952,953,954,955,956,957,962,964,966,(968,take the False branch),973,974,975,(976,deref of variable `self'),(976,take the True branch),977,981,(982,cmp_null_aux of variable `self'),(982,deref of variable `self'),(982,take the False branch),(985,deref of variable `self'),986
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `self' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="253">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="761" path="chrome-5.0.375.70/third_party/libxslt/libxslt/preproc.c">
   <explanation>
   function or method: xsltSortComp
   line-by-line trace: 701,703,701,(704,take the True branch),(705,take the True branch),706,716,718,716,(719,take the True branch),(720,take the True branch),721,732,734,732,(735,take the True branch),736,742,(743,take the True branch),(749,deref of variable `style'),751,(752,take the False branch),(758,take the True branch),759,(761,cmp_nonnull_aux of variable `style'),(761,deref of variable `style')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="254">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="2266" path="chrome-5.0.375.70/third_party/libxslt/libxslt/preproc.c">
   <explanation>
   function or method: xsltStylePreCompute
   line-by-line trace: (2185,deref of variable `inst'),(2185,take the False branch),(2188,cmp_nonnull_aux of variable `inst'),(2188,deref of variable `inst'),(2188,take the True branch),(2188,deref of variable `inst'),(2188,take the True branch),(2189,ptr_decl of variable `cur'),(2191,deref of variable `inst'),(2191,take the False branch),(2194,deref of variable `inst'),(2194,take the False branch),(2198,deref of variable `inst'),(2198,take the False branch),(2201,deref of variable `inst'),(2201,take the False branch),(2204,deref of variable `inst'),(2204,take the False branch),(2207,deref of variable `inst'),(2207,take the False branch),(2210,deref of variable `inst'),(2210,take the False branch),(2213,deref of variable `inst'),(2213,take the False branch),(2216,deref of variable `inst'),(2216,take the False branch),(2219,deref of variable `inst'),(2219,take the False branch),(2222,deref of variable `inst'),(2222,take the False branch),(2232,deref of variable `inst'),(2232,take the False branch),(2235,deref of variable `inst'),(2235,take the False branch),(2238,deref of variable `inst'),(2238,take the False branch),(2242,deref of variable `inst'),(2242,take the False branch),(2245,deref of variable `inst'),(2245,take the False branch),(2248,deref of variable `inst'),(2248,take the False branch),(2251,deref of variable `inst'),(2251,take the False branch),(2254,deref of variable `inst'),(2254,take the False branch),(2258,deref of variable `inst'),(2258,take the False branch),(2262,deref of variable `inst'),(2262,take the False branch),(2266,deref of variable `inst'),(2266,take the True branch),2267,2268
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `inst' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="255">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3039" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltApplyXSLTTemplate
   line-by-line trace: (2982,write of variable `cur'),2983,(2984,deref of variable `cur'),(2984,take the False branch),2991,2990,2989,(2988,deref of variable `cur'),(2988,take the False branch),(2989,deref of variable `cur'),(2989,take the False branch),(2990,deref of variable `cur'),(2990,take the False branch),(2991,deref of variable `cur'),(2991,take the False branch),(2992,cmp_nonnull_aux of variable `cur'),(2992,deref of variable `cur'),(2992,take the False branch),(2992,cmp_null of variable `cur'),(2997,deref of variable `cur'),(3002,deref of variable `cur'),3013,(3014,take the False branch),(3032,take the True branch),3037,(3039,deref of variable `cur'),(3039,write of variable `cur'),(3040,cmp_nonnull_aux of variable `cur'),(3040,cmp_null of variable `cur'),3044,(3050,take the True branch),3051,3052,(3061,take the True branch),(3062,ptr_decl of variable `curdoc'),(3062,ptr_decl of variable `tmp'),3064,3065,3066,(3068,take the True branch),3069,(3070,take the False branch),(3072,take the True branch),3073,3074,(3075,take the False branch),3077,(3085,take the False branch),3094,3099,(3100,take the False branch),(3122,take the True branch),(3122,take the True branch),3123
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `cur' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="256">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3554" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltDocumentElem
   line-by-line trace: (3382,ptr_decl of variable `URI'),(3384,deref of variable `style'),(3384,take the True branch),(3385,deref of variable `style'),(3386,deref of variable `style'),(3387,deref of variable `style'),(3387,take the True branch),(3388,deref of variable `style'),(3389,deref of variable `style'),3391,(3392,take the True branch),(3393,cmp_nonnull_aux of variable `style'),(3393,deref of variable `style'),3409,(3412,take the True branch),(3413,deref of variable `style'),(3413,take the False branch),(3415,deref of variable `style'),3417,(3420,take the True branch),(3421,deref of variable `style'),(3421,take the True branch),(3422,deref of variable `style'),(3423,deref of variable `style'),3425,(3428,take the True branch),(3429,take the True branch),(3430,deref of variable `style'),3439,3442,(3445,take the True branch),(3446,take the False branch),(3448,take the False branch),3451,(3453,cmp_nonnull_aux of variable `style'),(3453,deref of variable `style'),3455,3458,(3462,take the True branch),(3463,take the True branch),(3464,deref of variable `style'),3473,3476,(3480,take the True branch),(3481,deref of variable `style'),(3481,take the True branch),(3482,deref of variable `style'),(3483,deref of variable `style'),(3483,take the False branch),3486,(3487,take the True branch),(3488,take the False branch),(3488,take the False branch),(3488,take the False branch),(3490,take the True branch),3491,3510,3512,(3518,ptr_decl of variable `st'),(3518,take the False branch),(3519,ptr_decl of variable `st'),(3519,take the False branch),(3520,ptr_decl of variable `st'),(3520,take the False branch),(3521,ptr_decl of variable `st'),(3521,take the True branch),(3521,take the True branch),(3522,ptr_decl of variable `st'),(3522,take the False branch),(3524,take the True branch),(3525,take the True branch),(3526,take the False branch),(3542,take the False branch),(3552,take the True branch),3553,(3554,deref of variable `style'),(3555,take the False branch),3557,3558,3560,3581,(3582,take the True branch),3583,3584,3585,3586,3591,(3592,take the True branch),(3593,ptr_decl of variable `doctype'),(3595,take the True branch),(3595,take the True branch),3596,(3597,take the True branch),3598,3604,(3603,take the True branch),(3604,take the True branch),(3605,take the True branch),(3606,ptr_decl of variable `tmp'),3608,(3609,take the False branch),3614,(3616,take the True branch),3617,3618,(3619,take the True branch),3620,(3637,take the True branch),(3638,ptr_decl of variable `st'),(3638,take the False branch),(3639,ptr_decl of variable `st'),(3639,take the False branch),(3640,take the True branch),3641,3650,(3652,take the True branch),3653,3656,3664,3665,3666,3667,3668,(3669,take the True branch),3670,(3671,take the True branch),3672,(3673,cmp_nonnull_aux of variable `style'),3674,(3675,take the True branch),3676
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="257">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="4660" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltCallTemplate
   line-by-line trace: (4618,ptr_decl of variable `param'),4620,(4621,take the False branch),4647,(4653,deref of variable `comp'),(4653,deref of variable `comp'),(4655,take the True branch),4656,(4659,cmp_nonnull_aux of variable `comp'),(4659,deref of variable `comp'),(4659,take the True branch),(4660,take the True branch),112,(4660,take the True branch),(4660,deref of variable `comp')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `comp' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="258">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="6189" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltApplyStylesheetInternal
   line-by-line trace: (6153,ptr_decl of variable `last'),6156,6157,6158,6159,6160,(6163,take the True branch),6164,6165,6166,(6174,deref of variable `ctxt'),(6175,take the True branch),6176,(6182,cmp_nonnull_aux of variable `ctxt'),(6182,deref of variable `ctxt'),(6182,take the True branch),6183,6184,(6186,take the True branch),(6186,cmp_nonnull_aux of variable `ctxt'),(6186,take the True branch),6187,(6189,deref of variable `ctxt'),(6190,take the True branch),6191,(6207,cmp_nonnull_aux of variable `ctxt'),(6207,take the True branch),6208,6210
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ctxt' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="259">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1343" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseStylesheetOutput
   line-by-line trace: (1178,ptr_decl of variable `URI'),(1180,deref of variable `style'),(1180,take the True branch),(1181,deref of variable `style'),(1182,deref of variable `style'),(1183,deref of variable `style'),(1183,take the False branch),(1185,deref of variable `style'),1190,(1191,take the False branch),(1193,take the True branch),1195,(1194,take the False branch),(1194,take the False branch),(1195,take the False branch),1199,(1201,cmp_nonnull_aux of variable `style'),(1201,deref of variable `style'),1209,(1210,take the True branch),(1211,deref of variable `style'),(1211,take the False branch),(1213,deref of variable `style'),1216,(1217,take the True branch),(1218,deref of variable `style'),(1218,take the True branch),(1219,deref of variable `style'),(1220,deref of variable `style'),1223,(1224,take the True branch),(1225,take the True branch),(1226,deref of variable `style'),1234,1237,(1238,take the True branch),(1239,take the False branch),(1241,take the False branch),1244,(1246,deref of variable `style'),1248,1251,(1252,take the False branch),1266,(1268,take the True branch),(1269,deref of variable `style'),(1269,take the True branch),(1270,deref of variable `style'),(1271,deref of variable `style'),(1271,take the False branch),1274,(1275,take the True branch),(1276,take the False branch),(1276,take the False branch),(1276,take the False branch),(1276,take the False branch),(1278,take the True branch),1279,1334,1336,1339,(1340,take the True branch),(1341,deref of variable `style'),(1341,take the True branch),(1342,deref of variable `style'),(1343,deref of variable `style'),(1345,take the True branch),1346
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="260">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1397" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseStylesheetDecimalFormat
   line-by-line trace: (1394,write of variable `iter'),(1394,deref of variable `iter'),(1394,take the False branch),(1396,cmp_nonnull_aux of variable `iter'),(1397,deref of variable `iter'),1400,(1401,take the True branch),(1402,take the False branch),1403,1406,(1407,take the True branch),(1408,take the True branch),1409,1412,(1413,take the True branch),(1414,take the True branch),1415,1418,(1419,take the True branch),(1420,take the True branch),1421,1424,(1425,take the False branch),1430,(1431,take the True branch),(1432,take the True branch),1433,1436,(1437,take the True branch),(1438,take the True branch),1439,1442,(1443,take the True branch),(1444,take the True branch),1445,1448,(1449,take the True branch),(1450,take the True branch),1451,1454,(1455,take the True branch),(1456,take the True branch),1457,(1459,take the True branch),1460
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `iter' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="261">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1587" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseStylesheetExtPrefix
   line-by-line trace: (1577,ptr_decl of variable `ns'),(1579,take the True branch),(1580,deref of variable `style'),(1583,take the True branch),1584,(1587,cmp_nonnull_aux of variable `style'),(1587,deref of variable `style'),1595,1597,(1569,take the True branch),(1570,take the False branch),(1570,take the False branch),(1570,take the False branch),(1570,take the False branch),(1571,take the True branch),1572,1597,1599
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="262">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1723" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseStylesheetExcludePrefix
   line-by-line trace: (1713,ptr_decl of variable `ns'),(1715,take the True branch),(1716,deref of variable `style'),(1719,take the True branch),1720,(1723,cmp_nonnull_aux of variable `style'),(1723,deref of variable `style'),1733,1735,(1705,take the True branch),(1706,take the False branch),(1706,take the False branch),(1706,take the False branch),(1706,take the False branch),(1707,take the True branch),1708,1735,1737,1738
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="263">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="5021" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseTemplateContent
   line-by-line trace: (4860,ptr_decl of variable `next'),4861,4863,(4866,take the True branch),4868,4869,4868,(4871,take the False branch),(4873,take the True branch),4875,(4877,deref of variable `style'),4880,(4883,take the False branch),4897,(4903,take the True branch),4904,(4905,take the False branch),4932,4933,4972,(4973,take the True branch),4974,4975,4990,(4839,take the False branch),(4992,take the False branch),5005,(5006,take the False branch),5009,(5015,take the True branch),(5016,take the True branch),(5016,take the True branch),(5016,take the True branch),(5016,take the True branch),(5017,ptr_decl of variable `param'),5019,(5021,cmp_nonnull_aux of variable `style'),(5021,deref of variable `style'),5022,5023,5024,(5015,take the False branch),5026
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="264">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="5375" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseStylesheetTemplate
   line-by-line trace: (5329,ptr_decl of variable `URI'),5334,(5335,take the False branch),5339,(5340,take the True branch),5341,(5343,deref of variable `style'),(5344,deref of variable `style'),5346,(5349,take the True branch),(5350,take the True branch),5352,(5353,take the True branch),(5354,take the True branch),5355,5358,(5359,take the True branch),5360,5361,5362,5365,(5366,take the True branch),(5367,ptr_decl of variable `URI'),(5368,ptr_decl of variable `cur'),5373,(5374,take the True branch),(5375,cmp_nonnull_aux of variable `style'),(5375,deref of variable `style'),5376,5415,5416
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `style' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="265">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="4973" path="chrome-5.0.375.70/third_party/sqlite/src/btree.c">
   <explanation>
   function or method: freePage2
   line-by-line trace: (4884,write of variable `pPage'),(4884,take the False branch),(4885,deref of variable `pPage'),(4885,take the False branch),(4889,deref of variable `pPage'),(4889,deref of variable `pPage'),(4895,take the True branch),4896,(4897,take the False branch),(4907,take the False branch),(4959,cmp_null_aux of variable `pPage'),(4959,cmp_null of variable `pPage'),(4959,write of variable `pPage'),(4959,take the True branch),4960,4971,(4972,cmp_nonnull_aux of variable `pPage'),(4973,deref of variable `pPage'),4975,4976,4977
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `pPage' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="266">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="589" path="chrome-5.0.375.70/third_party/sqlite/src/malloc.c">
   <explanation>
   function or method: sqlite3DbMallocRaw
   line-by-line trace: (568,ptr_decl of variable `pBuf'),(569,deref of variable `db'),(569,take the False branch),573,(572,deref of variable `db'),(572,take the True branch),(572,deref of variable `db'),(572,take the True branch),(573,deref of variable `db'),(573,take the False branch),587,(588,take the True branch),(588,cmp_nonnull_aux of variable `db'),(589,deref of variable `db'),591
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `db' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="267">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1066" path="chrome-5.0.375.70/third_party/sqlite/src/select.c">
   <explanation>
   function or method: generateColumnNames
   line-by-line trace: (1060,ptr_decl of variable `zCol'),1061,(1062,deref of variable `pTabList'),(1062,take the False branch),1063,1065,(1066,deref of variable `pTabList'),(1067,take the False branch),1068,(1069,take the True branch),1070,(1074,take the True branch),(1074,take the True branch),1075,1076,1075,1086,(1051,take the True branch),(1052,ptr_decl of variable `p'),1053,(1054,take the False branch),(1055,take the False branch),(1058,take the False branch),(1058,take the True branch),(1058,cmp_nonnull_aux of variable `pTabList'),(1059,ptr_decl of variable `pTab'),(1060,ptr_decl of variable `zCol'),1061,(1062,deref of variable `pTabList'),(1062,take the False branch),1063,1065,(1066,deref of variable `pTabList'),(1067,take the False branch),1068,(1069,take the True branch),1070,(1074,take the True branch),(1074,take the True branch),1075,1076,1075,1086,(1051,take the False branch),1089
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `pTabList' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="268">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="576" path="chrome-5.0.375.70/third_party/sqlite/src/where.c">
   <explanation>
   function or method: findTerm
   line-by-line trace: (574,ptr_decl of variable `pParse'),(576,deref of variable `pIdx'),(577,take the True branch),592,(563,take the True branch),567,566,565,(564,take the True branch),(565,take the True branch),(566,take the True branch),(567,take the True branch),(569,cmp_nonnull_aux of variable `pIdx'),(569,take the True branch),(570,ptr_decl of variable `pX'),(571,ptr_decl of variable `pColl'),572,573,(574,ptr_decl of variable `pParse'),(576,deref of variable `pIdx'),(577,take the True branch),592,(563,take the False branch),595
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `pIdx' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="269">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3669" path="chrome-5.0.375.70/third_party/sqlite/src/where.c">
   <explanation>
   function or method: sqlite3WhereBegin
   line-by-line trace: (3546,ptr_decl of variable `pIdx'),3547,3548,3549,3550,3552,3553,(3587,take the False branch),3625,3626,(3629,take the True branch),(3630,deref of variable `ppOrderBy'),3632,3633,(3634,take the True branch),3635,3639,3640,3647,(3648,take the True branch),(3649,take the False branch),3656,(3544,take the False branch),(3661,take the False branch),(3661,take the False branch),(3668,take the True branch),(3668,cmp_nonnull_aux of variable `ppOrderBy'),(3669,deref of variable `ppOrderBy'),3677,(3678,take the False branch),3686,(3687,take the False branch),3758,3764,(3765,take the False branch),3822
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ppOrderBy' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="270">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="526" path="chrome-5.0.375.70/third_party/zlib/contrib/minizip/unzip.c">
   <explanation>
   function or method: unzClose
   line-by-line trace: (521,write of variable `s'),(523,deref of variable `s'),(523,take the False branch),(526,deref of variable `s'),(526,deref of variable `s'),(526,deref of variable `s'),(527,cmp_nonnull_aux of variable `s'),528
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `s' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="271">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1561" path="chrome-5.0.375.70/third_party/zlib/contrib/minizip/unzip.c">
   <explanation>
   function or method: unzGetGlobalComment
   line-by-line trace: (1546,ptr_decl of variable `s'),1547,(1548,take the False branch),1550,1552,(1553,take the True branch),1554,(1556,take the False branch),(1559,take the True branch),(1561,deref of variable `szComment'),(1562,take the False branch),(1566,cmp_nonnull_aux of variable `szComment'),(1566,take the True branch),1567,1568
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `szComment' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="272">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="184" path="chrome-5.0.375.70/third_party/zlib/contrib/minizip/zip.c">
   <explanation>
   function or method: free_datablock
   line-by-line trace: (184,ptr_decl of variable `ldinext'),(184,deref of variable `ldi'),(185,cmp_nonnull_aux of variable `ldi'),(186,write of variable `ldi'),(182,cmp_nonnull_aux of variable `ldi'),(186,cmp_null of variable `ldi')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `ldi' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="273">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="1218" path="chrome-5.0.375.70/third_party/zlib/contrib/minizip/zip.c">
   <explanation>
   function or method: zipClose
   line-by-line trace: (1167,ptr_decl of variable `ldi'),(1167,deref of variable `zi'),(1168,take the False branch),(1180,deref of variable `zi'),(1182,take the True branch),(1183,deref of variable `zi'),(1183,deref of variable `zi'),(1185,take the False branch),(1188,take the True branch),(1189,deref of variable `zi'),(1189,deref of variable `zi'),(1191,take the True branch),(1192,deref of variable `zi'),(1192,deref of variable `zi'),(1192,deref of variable `zi'),(1194,take the False branch),(1197,take the True branch),(1198,deref of variable `zi'),(1198,deref of variable `zi'),(1200,take the False branch),(1205,take the True branch),(1206,deref of variable `zi'),(1206,deref of variable `zi'),(1208,take the True branch),(1208,take the True branch),(1209,deref of variable `zi'),1210,(1209,deref of variable `zi'),(1209,deref of variable `zi'),(1210,take the True branch),1211,(1213,deref of variable `zi'),(1213,deref of variable `zi'),(1213,deref of variable `zi'),(1213,take the True branch),(1214,take the True branch),1215,(1218,deref of variable `zi'),(1218,take the True branch),(1218,deref of variable `zi'),(1220,cmp_nonnull_aux of variable `zi'),1222
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `zi' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="274">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="3209" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::Parser::ParseMemberWithNewPrefixesExpression
   line-by-line trace: (3208,ptr_decl of variable `args'),(3208,take the False branch),(3209,deref of variable `stack'),(3210,take the True branch),3211,3214,(3188,take the True branch),3189,3205,(3206,cmp_null_aux of variable `stack'),(3206,deref of variable `stack'),(3206,take the False branch),(3208,ptr_decl of variable `args'),(3208,take the False branch),(3209,deref of variable `stack'),(3210,take the True branch),3211,3214,(3188,take the True branch),3189,3213,3214
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `stack' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="275">
  <name>
   PTR-null-cmp-aft
  </name>
  <location line="164" path="chrome-5.0.375.70/webkit/appcache/appcache_update_job.cc">
   <explanation>
   function or method: appcache::AppCacheUpdateJob::StartUpdate
   line-by-line trace: (163,write of variable `host'),(164,deref of variable `host'),168,(169,take the True branch),(171,cmp_nonnull_aux of variable `host'),172,(173,take the True branch),174,(177,take the True branch),178,182
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   `host' is dereferenced, then compared with NULL
   </textoutput>
  </output>
 </weakness>
 <weakness id="276">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="136" path="chrome-5.0.375.70/base/linux_util.cc">
   <explanation>
   function or method: base::BGRAToRGBA
   line-by-line trace: (127,take the True branch),128,(130,write of variable `new_pixels'),(133,take the True branch),(134,take the True branch),135,(136,deref of variable `new_pixels')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `new_pixels' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="277">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="182" path="chrome-5.0.375.70/base/process_util_linux.cc">
   <explanation>
   function or method: base::NamedProcessIterator::CheckForNextProcess
   line-by-line trace: (118,write of variable `slot'),119,120,124,125,(126,take the False branch),171,(177,take the False branch),(182,deref of variable `slot')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `slot' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="278">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="567" path="chrome-5.0.375.70/base/third_party/dmg_fp/dtoa.cc">
   <explanation>
   function or method: dmg_fp::Balloc
   line-by-line trace: 542,543,545,(551,take the True branch),(551,write of variable `rv'),554,558,559,558,(560,take the False branch),(565,write of variable `rv'),(567,deref of variable `rv')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rv' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="279">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4052" path="chrome-5.0.375.70/base/third_party/dmg_fp/dtoa.cc">
   <explanation>
   function or method: dmg_fp::dtoa
   line-by-line trace: 3564,3565,3566,3567,3569,3570,3572,3573,3574,3575,(3594,take the True branch),3595,3596,3600,(3601,take the True branch),3603,3604,(3611,take the False branch),(3628,take the False branch),3647,(3651,take the True branch),3653,3654,3655,3683,3689,3703,3704,(3705,take the True branch),(3705,take the True branch),3706,3707,(3708,take the True branch),(3708,take the True branch),(3709,take the True branch),3710,3711,3713,(3714,take the True branch),3715,3716,(3722,take the True branch),3723,3724,3725,(3732,take the False branch),(3732,take the True branch),3733,3739,(3743,take the True branch),3744,3745,3747,3748,3750,3751,3752,3753,3754,3755,3772,3774,(3781,take the True branch),(3781,take the True branch),(3781,take the True branch),3785,3786,3787,3788,3789,(3790,take the True branch),3791,3792,(3793,take the True branch),3795,3796,3797,(3799,take the False branch),3804,(3814,take the True branch),(3814,take the True branch),(3814,take the True branch),(3815,take the True branch),3816,3876,3877,3878,3879,3880,(3885,take the True branch),(3885,take the False branch),3936,3937,(3938,write of variable `mhi'),(3939,take the False branch),(3953,take the True branch),(3953,take the True branch),(3954,take the True branch),3955,3956,3957,(3959,take the True branch),(3960,take the True branch),(3961,take the False branch),(3967,take the True branch),3968,3973,(3974,take the True branch),3975,3979,(3980,take the False branch),(3980,take the True branch),3987,(3985,take the True branch),(3985,take the True branch),(3987,take the True branch),3991,3992,3993,(4005,take the False branch),(4005,take the False branch),4013,4014,4015,4016,(4017,take the True branch),4018,(4019,take the True branch),4020,(4021,take the False branch),(4030,take the True branch),(4030,take the False branch),(4030,take the False branch),(4042,take the True branch),(4043,take the False branch),4050,(4051,take the True branch),(4052,deref of variable `mhi')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mhi' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="280">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="115" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmime.c">
   <explanation>
   function or method: xdg_dir_time_list_add
   line-by-line trace: 103,(105,write of variable `list'),(105,take the False branch),(114,write of variable `list'),(115,deref of variable `list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="281">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="287" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmime.c">
   <explanation>
   function or method: xdg_run_command_on_dirs
   line-by-line trace: 227,228,229,231,(232,take the True branch),(234,take the False branch),258,(259,take the True branch),260,262,(264,take the True branch),266,267,268,269,271,(272,take the True branch),(272,take the False branch),(275,take the False branch),(281,take the True branch),282,(285,write of variable `dir'),286,(287,deref of variable `dir')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `dir' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="282">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="867" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmime.c">
   <explanation>
   function or method: xdg_mime_register_reload_callback
   line-by-line trace: 862,863,(866,write of variable `list_el'),(867,deref of variable `list_el')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list_el' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="283">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="69" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimealias.c">
   <explanation>
   function or method: _xdg_mime_alias_list_new
   line-by-line trace: 65,(67,write of variable `list'),(69,deref of variable `list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="284">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="146" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimecache.c">
   <explanation>
   function or method: _xdg_mime_cache_new_from_file
   line-by-line trace: (115,write of variable `cache'),118,119,120,123,(125,take the False branch),(128,take the False branch),(128,take the False branch),131,(133,take the False branch),(137,take the False branch),(138,take the False branch),(145,write of variable `cache'),(146,deref of variable `cache')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cache' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="285">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="68" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimeicon.c">
   <explanation>
   function or method: _xdg_mime_icon_list_new
   line-by-line trace: 64,(66,write of variable `list'),(68,deref of variable `list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="286">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="172" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimeint.c">
   <explanation>
   function or method: _xdg_convert_to_ucs4
   line-by-line trace: 159,160,161,(163,write of variable `out'),165,166,(167,take the False branch),(172,deref of variable `out')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `out' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="287">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="107" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimemagic.c">
   <explanation>
   function or method: _xdg_mime_magic_matchlet_new
   line-by-line trace: 103,(105,write of variable `matchlet'),(107,deref of variable `matchlet')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `matchlet' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="288">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="192" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimemagic.c">
   <explanation>
   function or method: _xdg_mime_magic_read_to_newline
   line-by-line trace: 165,166,167,169,170,(171,write of variable `retval'),172,(174,take the True branch),176,(177,take the True branch),179,180,188,(192,deref of variable `retval')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `retval' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="289">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="774" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimemagic.c">
   <explanation>
   function or method: _xdg_mime_magic_read_magic_file
   line-by-line trace: 756,(757,write of variable `match'),759,(761,take the True branch),763,771,772,(773,take the False branch),(774,take the True branch),(774,deref of variable `match')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `match' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="290">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="70" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimeparent.c">
   <explanation>
   function or method: _xdg_mime_parent_list_new
   line-by-line trace: 66,(68,write of variable `list'),(70,deref of variable `list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="291">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="88" path="chrome-5.0.375.70/base/unix_domain_socket_posix.cc">
   <explanation>
   function or method: base::RecvMsg
   line-by-line trace: 51,53,55,56,57,58,59,61,62,63,(65,take the True branch),(65,take the False branch),(66,take the False branch),(69,write of variable `wire_fds'),70,(72,take the False branch),(86,take the False branch),(86,take the True branch),(87,take the True branch),(88,deref of variable `wire_fds')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `wire_fds' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="292">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="75" path="chrome-5.0.375.70/chrome/browser/back_forward_menu_model.cc">
   <explanation>
   function or method: BackForwardMenuModel::GetLabelAt
   line-by-line trace: (66,take the False branch),(70,take the False branch),(74,write of variable `entry'),(75,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="293">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="112" path="chrome-5.0.375.70/chrome/browser/back_forward_menu_model.cc">
   <explanation>
   function or method: BackForwardMenuModel::GetIconAt
   line-by-line trace: (104,take the False branch),(107,take the False branch),(111,write of variable `entry'),(112,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="294">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="81" path="chrome-5.0.375.70/chrome/browser/bookmarks/bookmark_folder_tree_model.cc">
   <explanation>
   function or method: BookmarkFolderTreeModel::BookmarkNodeMoved
   line-by-line trace: 74,(75,take the False branch),(78,write of variable `moved_folder_node'),(79,take the False branch),80,(81,deref of variable `moved_folder_node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `moved_folder_node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="295">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="109" path="chrome-5.0.375.70/chrome/browser/bookmarks/bookmark_folder_tree_model.cc">
   <explanation>
   function or method: BookmarkFolderTreeModel::BookmarkNodeRemoved
   line-by-line trace: (104,take the False branch),(107,write of variable `folder_node'),(108,take the False branch),(109,deref of variable `folder_node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `folder_node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="296">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="141" path="chrome-5.0.375.70/chrome/browser/bookmarks/bookmark_folder_tree_model.cc">
   <explanation>
   function or method: BookmarkFolderTreeModel::BookmarkNodeChildrenReordered
   line-by-line trace: (139,write of variable `folder_node'),(140,take the False branch),(141,deref of variable `folder_node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `folder_node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="297">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1982" path="chrome-5.0.375.70/chrome/browser/browser.cc">
   <explanation>
   function or method: Browser::DuplicateContentsAt
   line-by-line trace: 1953,1954,(1955,take the True branch),1956,(1958,take the False branch),(1971,write of variable `browser'),(1972,take the False branch),(1976,take the False branch),(1982,deref of variable `browser')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="298">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="334" path="chrome-5.0.375.70/chrome/browser/chrome_plugin_host.cc">
   <explanation>
   function or method: ModelessHtmlDialogDelegate::Show
   line-by-line trace: (332,take the False branch),(333,write of variable `browser'),(334,deref of variable `browser')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="299">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="333" path="chrome-5.0.375.70/chrome/browser/debugger/devtools_manager.cc">
   <explanation>
   function or method: DevToolsManager::ReopenWindow
   line-by-line trace: 328,(329,take the False branch),(331,write of variable `inspected_rvh'),(332,take the False branch),(333,deref of variable `inspected_rvh')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `inspected_rvh' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="300">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="205" path="chrome-5.0.375.70/chrome/browser/debugger/devtools_window.cc">
   <explanation>
   function or method: DevToolsWindow::CreateDevToolsBrowser
   line-by-line trace: 192,193,194,195,197,(198,take the False branch),202,(203,take the True branch),(204,write of variable `defaults'),(205,deref of variable `defaults')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `defaults' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="301">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="268" path="chrome-5.0.375.70/chrome/browser/download/download_request_manager.cc">
   <explanation>
   function or method: DownloadRequestManager::CanDownloadImpl
   line-by-line trace: (253,take the False branch),260,(261,take the False branch),266,267,(266,write of variable `state'),(268,deref of variable `state')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `state' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="302">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="337" path="chrome-5.0.375.70/chrome/browser/extensions/extensions_service.cc">
   <explanation>
   function or method: ExtensionsService::UninstallExtension
   line-by-line trace: (330,write of variable `extension'),(333,take the False branch),(337,deref of variable `extension')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `extension' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="303">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="994" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_bar_gtk.cc">
   <explanation>
   function or method: BookmarkBarGtk::OnClicked
   line-by-line trace: (992,write of variable `node'),(993,take the False branch),(994,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="304">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1166" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_bar_gtk.cc">
   <explanation>
   function or method: BookmarkBarGtk::OnDragReceived
   line-by-line trace: 1152,1153,1155,1156,(1157,take the False branch),(1161,take the False branch),(1165,write of variable `dest_node'),(1166,deref of variable `dest_node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `dest_node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="305">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1295" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_bar_gtk.cc">
   <explanation>
   function or method: BookmarkBarGtk::PopupForButton
   line-by-line trace: (1283,write of variable `node'),(1284,take the False branch),(1285,take the True branch),1287,(1288,take the False branch),(1294,take the True branch),(1294,take the True branch),(1295,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="306">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1113" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_manager_gtk.cc">
   <explanation>
   function or method: BookmarkManagerGtk::OnRightTreeViewDragReceived
   line-by-line trace: 1060,1061,1063,1068,1067,1063,(1070,take the False branch),1075,1076,1077,1078,1077,1080,1081,(1084,write of variable `parent'),1085,(1088,take the True branch),(1088,take the True branch),(1088,take the True branch),1089,1090,1091,1092,(1093,take the True branch),(1093,take the False branch),1097,1098,(1102,take the False branch),(1102,take the False branch),(1102,take the False branch),1110,1111,(1110,take the True branch),(1113,deref of variable `parent')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `parent' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="307">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1145" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_manager_gtk.cc">
   <explanation>
   function or method: BookmarkManagerGtk::OnRightTreeViewDragMotion
   line-by-line trace: 1135,1136,1137,1138,1137,(1140,write of variable `parent'),(1141,take the True branch),1142,1143,1142,(1145,deref of variable `parent')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `parent' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="308">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="260" path="chrome-5.0.375.70/chrome/browser/gtk/bookmark_utils_gtk.cc">
   <explanation>
   function or method: bookmark_utils::WriteBookmarksToSelection
   line-by-line trace: 227,250,251,252,(251,write of variable `uris'),(253,take the True branch),257,(260,deref of variable `uris')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `uris' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="309">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1689" path="chrome-5.0.375.70/chrome/browser/gtk/browser_window_gtk.cc">
   <explanation>
   function or method: BrowserWindowGtk::OnGtkAccelerator
   line-by-line trace: 1685,(1686,write of variable `browser_window'),(1688,take the False branch),(1689,deref of variable `browser_window')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser_window' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="310">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="104" path="chrome-5.0.375.70/chrome/browser/gtk/extension_installed_bubble_gtk.cc">
   <explanation>
   function or method: ExtensionInstalledBubbleGtk::ShowInternal
   line-by-line trace: 85,87,(85,write of variable `browser_window'),89,(91,take the False branch),(102,take the True branch),103,(104,deref of variable `browser_window')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser_window' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="311">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="236" path="chrome-5.0.375.70/chrome/browser/gtk/extension_installed_bubble_gtk.cc">
   <explanation>
   function or method: ExtensionInstalledBubbleGtk::InfoBubbleClosing
   line-by-line trace: (230,take the True branch),232,234,(232,write of variable `browser_window'),235,(236,deref of variable `browser_window')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser_window' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="312">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="322" path="chrome-5.0.375.70/chrome/browser/gtk/gtk_theme_provider.cc">
   <explanation>
   function or method: GtkThemeProvider::GetScrollbarColors
   line-by-line trace: 281,282,283,284,285,286,287,290,291,292,293,294,(295,write of variable `data'),(296,take the True branch),(297,take the False branch),305,308,310,308,311,314,(315,take the True branch),(316,take the True branch),(322,deref of variable `data')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `data' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="313">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="340" path="chrome-5.0.375.70/chrome/browser/history/text_database_manager.cc">
   <explanation>
   function or method: history::TextDatabaseManager::DeletePageData
   line-by-line trace: 326,(332,write of variable `db'),(333,take the False branch),(335,write of variable `db'),(337,take the True branch),338,(340,deref of variable `db')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `db' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="314">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="403" path="chrome-5.0.375.70/chrome/browser/importer/mork_reader.cc">
   <explanation>
   function or method: MorkReader::ParseTable
   line-by-line trace: 248,251,(255,write of variable `current_row'),257,259,260,261,(263,take the True branch),264,382,383,(384,take the False branch),389,390,(391,take the False branch),396,397,(399,take the False branch),(403,deref of variable `current_row')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `current_row' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="315">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="106" path="chrome-5.0.375.70/chrome/browser/notifications/balloon_host.cc">
   <explanation>
   function or method: BalloonHost::ShowCreatedWindow
   line-by-line trace: (100,take the False branch),103,(104,take the True branch),(105,write of variable `browser'),(106,deref of variable `browser')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="316">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="94" path="chrome-5.0.375.70/chrome/browser/privacy_blacklist/blacklist_interceptor.cc">
   <explanation>
   function or method: _GLOBAL__N__24_blacklist_interceptor_cc_36202508::URLRequestBlacklistJob::GetBestMatchingEntryProvider
   line-by-line trace: 80,81,(82,write of variable `entry'),(83,take the True branch),84,85,84,85,(84,take the False branch),88,(94,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="317">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="54" path="chrome-5.0.375.70/chrome/browser/safe_browsing/safe_browsing_util.cc">
   <explanation>
   function or method: SBEntry::Create
   line-by-line trace: 51,(52,write of variable `rv'),53,(54,deref of variable `rv')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rv' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="318">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="72" path="chrome-5.0.375.70/chrome/browser/session_startup_pref.cc">
   <explanation>
   function or method: SessionStartupPref::SetStartupPref
   line-by-line trace: (62,take the False branch),63,68,69,70,(69,write of variable `url_pref_list'),(71,take the False branch),(72,deref of variable `url_pref_list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `url_pref_list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="319">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="96" path="chrome-5.0.375.70/chrome/browser/session_startup_pref.cc">
   <explanation>
   function or method: SessionStartupPref::GetStartupPref
   line-by-line trace: (87,take the True branch),88,89,88,(93,write of variable `url_pref_list'),(95,take the False branch),(96,deref of variable `url_pref_list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `url_pref_list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="320">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="723" path="chrome-5.0.375.70/chrome/browser/tabs/tab_strip_model.cc">
   <explanation>
   function or method: TabStripModel::Observe
   line-by-line trace: 698,718,719,(721,take the True branch),(722,write of variable `contents'),(723,deref of variable `contents')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `contents' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="321">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="943" path="chrome-5.0.375.70/chrome/browser/task_manager.cc">
   <explanation>
   function or method: TaskManager::OpenAboutMemory
   line-by-line trace: (915,write of variable `browser'),(917,take the False branch),(927,cmp_nonnull of variable `browser'),(928,deref of variable `browser'),(935,deref of variable `browser'),61,935,60,936,937,(935,take the True branch),(939,write of variable `browser'),(940,take the False branch),(943,deref of variable `browser')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `browser' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="322">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1024" path="chrome-5.0.375.70/chrome/browser/webdata/web_database.cc">
   <explanation>
   function or method: WebDatabase::GetAllAutofillEntries
   line-by-line trace: (995,take the True branch),996,(1000,take the False branch),1005,(1006,write of variable `current_key_ptr'),1007,1008,1009,(1010,take the True branch),1011,1012,1013,(1015,take the False branch),(1024,deref of variable `current_key_ptr')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `current_key_ptr' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="323">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1026" path="chrome-5.0.375.70/chrome/browser/webdata/web_database.cc">
   <explanation>
   function or method: WebDatabase::GetAllAutofillEntries
   line-by-line trace: (995,take the True branch),996,(1000,take the False branch),1005,1006,(1007,write of variable `timestamps_ptr'),1008,1009,(1010,take the True branch),1011,1012,1013,(1015,take the False branch),(1024,take the True branch),(1026,deref of variable `timestamps_ptr')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `timestamps_ptr' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="324">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="124" path="chrome-5.0.375.70/chrome/common/extensions/extension_message_filter_peer.cc">
   <explanation>
   function or method: ExtensionMessageFilterPeer::ReplaceMessages
   line-by-line trace: (100,take the False branch),(100,take the False branch),(103,take the False branch),106,(107,write of variable `l10n_messages'),(108,take the True branch),109,110,111,110,115,116,115,117,(119,write of variable `l10n_messages'),122,123,(124,deref of variable `l10n_messages')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `l10n_messages' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="325">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="95" path="chrome-5.0.375.70/chrome/renderer/extensions/event_bindings.cc">
   <explanation>
   function or method: _GLOBAL__N__17_event_bindings_cc_c1fc068a::ExtensionImpl::AttachEvent
   line-by-line trace: (78,take the False branch),(80,take the False branch),(80,take the False branch),(82,take the True branch),83,84,(89,take the False branch),(94,write of variable `current_context_info'),(95,deref of variable `current_context_info')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `current_context_info' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="326">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="211" path="chrome-5.0.375.70/chrome/renderer/extensions/renderer_extension_bindings.cc">
   <explanation>
   function or method: _GLOBAL__N__30_renderer_extension_bindings_cc_6d99c556::ExtensionImpl::GetL10nMessage
   line-by-line trace: (174,take the False branch),(174,take the False branch),179,(180,take the False branch),(180,take the False branch),183,(184,take the False branch),(188,write of variable `l10n_messages'),(189,take the True branch),192,(193,take the False branch),196,198,199,198,202,203,202,204,(206,write of variable `l10n_messages'),209,210,(211,deref of variable `l10n_messages')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `l10n_messages' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="327">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="67" path="chrome-5.0.375.70/chrome/renderer/nacl_desc_wrapper_chrome.cc">
   <explanation>
   function or method: nacl::DescWrapperFactory::ImportPepperSync
   line-by-line trace: 43,(44,write of variable `ss_desc'),45,(47,write of variable `ss_desc'),(49,take the True branch),52,66,(67,deref of variable `ss_desc')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ss_desc' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="328">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="356" path="chrome-5.0.375.70/gfx/codec/png_codec.cc">
   <explanation>
   function or method: gfx::_GLOBAL__N__12_png_codec_cc_f1f4633e::DecodeRowCallback
   line-by-line trace: 340,(343,take the False branch),(345,take the False branch),(350,write of variable `base'),(351,take the False branch),(353,take the False branch),(356,deref of variable `base')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `base' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="329">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="57" path="chrome-5.0.375.70/gfx/gtk_util.cc">
   <explanation>
   function or method: gfx::GdkPixbufFromSkBitmap
   line-by-line trace: (32,take the False branch),35,37,38,39,42,(43,write of variable `divided'),(45,take the True branch),(46,take the True branch),47,49,(50,take the False branch),(57,deref of variable `divided')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `divided' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="330">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="146" path="chrome-5.0.375.70/native_client/src/trusted/plugin/srpc/srpc_client.cc">
   <explanation>
   function or method: nacl_srpc::SrpcClient::GetSignatureObject
   line-by-line trace: (121,take the True branch),(121,take the False branch),(122,take the False branch),125,(126,write of variable `ret_array'),(128,take the True branch),(129,take the False branch),(134,take the True branch),135,136,137,138,140,144,143,142,140,145,(146,deref of variable `ret_array')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret_array' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="331">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="73" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/nacl_ldt.c">
   <explanation>
   function or method: NaClFindUnusedEntryNumber
   line-by-line trace: 64,(65,write of variable `entries'),66,68,(70,take the True branch),71,(72,take the True branch),(73,deref of variable `entries')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entries' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="332">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="35" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure0Ctor
   line-by-line trace: (31,write of variable `self'),(32,take the True branch),33,(35,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="333">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="62" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure1Ctor
   line-by-line trace: (58,write of variable `self'),(59,take the True branch),60,(62,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="334">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="91" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure2Ctor
   line-by-line trace: (87,write of variable `self'),(88,take the True branch),89,(91,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="335">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="122" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure3Ctor
   line-by-line trace: (118,write of variable `self'),(119,take the True branch),120,(122,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="336">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="156" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure4Ctor
   line-by-line trace: (152,write of variable `self'),(153,take the True branch),154,(156,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="337">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="193" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure5Ctor
   line-by-line trace: (189,write of variable `self'),(190,take the True branch),191,(193,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="338">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="233" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure6Ctor
   line-by-line trace: (229,write of variable `self'),(230,take the True branch),231,(233,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="339">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="276" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure7Ctor
   line-by-line trace: (272,write of variable `self'),(273,take the True branch),274,(276,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="340">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="321" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure8Ctor
   line-by-line trace: (317,write of variable `self'),(318,take the True branch),319,(321,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="341">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="369" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure9Ctor
   line-by-line trace: (365,write of variable `self'),(366,take the True branch),367,(369,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="342">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="420" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_closure.c">
   <explanation>
   function or method: NaClClosure10Ctor
   line-by-line trace: (416,write of variable `self'),(417,take the True branch),418,(420,deref of variable `self')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `self' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="343">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="80" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_sync_queue.c">
   <explanation>
   function or method: NaClSyncQueueInsert
   line-by-line trace: 70,72,(76,write of variable `nsqip'),(77,take the True branch),78,(80,deref of variable `nsqip')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `nsqip' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="344">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1909" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_syscall_common.c">
   <explanation>
   function or method: NaClCommonSysImc_Recvmsg
   line-by-line trace: 1746,1747,1748,1749,1750,1751,1752,1753,1754,1755,1756,1757,1758,1759,1761,1766,1772,(1775,take the False branch),1780,1781,(1783,take the False branch),(1789,take the False branch),(1796,take the False branch),(1831,take the False branch),(1842,write of variable `kern_descv'),1845,(1846,take the False branch),1852,1853,1855,1856,1857,1859,1861,1866,(1869,take the False branch),(1874,take the False branch),(1874,take the False branch),1879,1887,1892,(1894,take the False branch),1903,(1904,take the True branch),(1906,take the False branch),(1909,deref of variable `kern_descv')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `kern_descv' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="345">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="37" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/nc_inst_iter.c">
   <explanation>
   function or method: NaClInstIterCreateWithLookback
   line-by-line trace: 32,33,(35,take the True branch),(36,write of variable `iter'),(37,deref of variable `iter')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `iter' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="346">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1478" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/nc_inst_trans.c">
   <explanation>
   function or method: NaClAppendOperand
   line-by-line trace: 1457,1458,1459,1460,1461,1462,1463,1464,1468,1469,1470,1471,1472,1473,(1474,write of variable `address'),(1477,take the True branch),(1478,deref of variable `address')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `address' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="347">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1098" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/ncdecode_tablegen.c">
   <explanation>
   function or method: NaClNewInstNode
   line-by-line trace: 1096,(1097,write of variable `root'),(1098,deref of variable `root')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `root' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="348">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="356" path="chrome-5.0.375.70/net/base/nss_memio.c">
   <explanation>
   function or method: memio_CreateIOLayer
   line-by-line trace: 346,347,348,350,352,(353,write of variable `secret'),354,(356,deref of variable `secret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `secret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="349">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="238" path="chrome-5.0.375.70/net/disk_cache/mem_entry_impl.cc">
   <explanation>
   function or method: disk_cache::MemEntryImpl::WriteSparseData
   line-by-line trace: (213,take the True branch),(215,take the False branch),(218,take the False branch),(218,take the False branch),221,(228,take the True branch),(229,write of variable `child'),230,234,235,234,(238,deref of variable `child')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `child' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="350">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="541" path="chrome-5.0.375.70/net/socket/client_socket_pool_base.cc">
   <explanation>
   function or method: net::internal::ClientSocketPoolBaseHelper::FindTopStalledGroup
   line-by-line trace: 520,(521,write of variable `top_group_name'),522,523,524,(523,take the False branch),(539,take the True branch),540,(541,deref of variable `top_group_name')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `top_group_name' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="351">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="823" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsnce.c">
   <explanation>
   function or method: ServerSessionIDLookup
   line-by-line trace: 774,775,776,777,778,779,780,781,782,783,784,786,787,(788,take the False branch),(791,write of variable `psce'),(792,take the True branch),(792,cmp_nonnull of variable `psce'),(793,deref of variable `psce'),(793,take the True branch),(794,deref of variable `psce'),(794,take the True branch),796,(797,take the False branch),(818,take the True branch),(819,write of variable `psce'),820,(823,deref of variable `psce')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `psce' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="352">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="135" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AXObjectCache.cpp">
   <explanation>
   function or method: WebCore::AXObjectCache::focusedUIElementForPage
   line-by-line trace: 121,122,(123,take the False branch),(126,take the False branch),129,(130,take the False branch),(133,write of variable `obj'),(135,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="353">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="150" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityListBox.cpp">
   <explanation>
   function or method: WebCore::AccessibilityListBox::listBoxOptionAccessibilityObject
   line-by-line trace: (146,take the False branch),(146,take the False branch),(149,write of variable `listBoxObject'),(150,deref of variable `listBoxObject')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `listBoxObject' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="354">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="71" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityMenuListPopup.cpp">
   <explanation>
   function or method: WebCore::AccessibilityMenuListPopup::menuListOptionAccessibilityObject
   line-by-line trace: (67,take the False branch),(67,take the False branch),(70,write of variable `object'),(71,deref of variable `object')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `object' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="355">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="399" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityObject.cpp">
   <explanation>
   function or method: WebCore::replacedNodeNeedsCharacter
   line-by-line trace: (394,take the False branch),(394,take the False branch),(394,take the False branch),(394,take the False branch),(398,write of variable `object'),(399,deref of variable `object')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `object' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="356">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="707" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityRenderObject.cpp">
   <explanation>
   function or method: WebCore::AccessibilityRenderObject::menuButtonForMenu
   line-by-line trace: 702,(704,take the True branch),(704,take the True branch),(706,write of variable `menuItemAX'),(707,deref of variable `menuItemAX')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `menuItemAX' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="357">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2525" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityRenderObject.cpp">
   <explanation>
   function or method: WebCore::AccessibilityRenderObject::doAccessibilityHitTest
   line-by-line trace: (2493,take the False branch),(2493,take the False branch),2496,2498,2500,2501,(2502,take the False branch),2504,(2506,take the False branch),(2509,take the False branch),2512,(2513,take the False branch),(2516,write of variable `result'),(2518,take the False branch),(2525,deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="358">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="247" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityTable.cpp">
   <explanation>
   function or method: WebCore::AccessibilityTable::addChildren
   line-by-line trace: (208,take the False branch),(213,take the False branch),215,(216,take the False branch),(216,take the False branch),219,220,224,(225,take the False branch),(228,take the False branch),231,(233,take the True branch),235,237,238,(239,take the True branch),(240,take the True branch),242,(243,take the False branch),(246,write of variable `rowObject'),(247,deref of variable `rowObject')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rowObject' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="359">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="438" path="chrome-5.0.375.70/third_party/WebKit/WebCore/accessibility/AccessibilityTable.cpp">
   <explanation>
   function or method: WebCore::AccessibilityTable::cellForColumnAndRow
   line-by-line trace: (374,take the False branch),(374,take the False branch),377,379,380,(381,take the True branch),382,384,385,386,(387,take the True branch),389,390,392,394,(395,take the True branch),(395,take the True branch),(395,take the True branch),396,(400,take the True branch),(403,take the True branch),404,(406,take the True branch),(406,take the True branch),407,408,(411,take the True branch),(413,take the False branch),418,(424,take the True branch),425,431,(434,take the False branch),(437,write of variable `cellObject'),(438,deref of variable `cellObject')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cellObject' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="360">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="269" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/V8Proxy.cpp">
   <explanation>
   function or method: WebCore::V8Proxy::handleOutOfMemory
   line-by-line trace: 248,(250,take the False branch),(254,write of variable `frame'),256,(257,take the False branch),265,(269,deref of variable `frame')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `frame' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="361">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="173" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_GetStringIdentifier
   line-by-line trace: (157,take the False branch),(159,take the True branch),161,162,163,(164,take the False branch),167,(170,write of variable `identifier'),171,172,(173,deref of variable `identifier')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `identifier' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="362">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="202" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_GetIntIdentifier
   line-by-line trace: (197,take the False branch),(197,take the True branch),198,(199,write of variable `id'),(200,take the True branch),(201,write of variable `id'),(202,deref of variable `id')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `id' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="363">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="216" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_GetIntIdentifier
   line-by-line trace: (197,take the False branch),(197,take the False branch),209,210,(211,take the False branch),(215,write of variable `identifier'),(216,deref of variable `identifier')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `identifier' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="364">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="272" path="chrome-5.0.375.70/third_party/WebKit/WebCore/bindings/v8/npruntime.cpp">
   <explanation>
   function or method: _NPN_CreateObject
   line-by-line trace: (263,take the False branch),(265,take the True branch),266,(267,take the False branch),(270,write of variable `npObject'),(272,deref of variable `npObject')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `npObject' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="365">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="407" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::compareBoundaryPoints
   line-by-line trace: (389,take the False branch),(394,take the False branch),399,400,(401,take the False branch),(403,write of variable `sourceCont'),(404,take the False branch),(407,deref of variable `sourceCont')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `sourceCont' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="366">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="407" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::compareBoundaryPoints
   line-by-line trace: (389,take the False branch),(394,take the False branch),399,(400,write of variable `thisCont'),(401,take the False branch),403,(404,take the False branch),(407,deref of variable `thisCont')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `thisCont' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="367">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="871" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::processContents
   line-by-line trace: 591,(592,take the False branch),(592,take the True branch),593,595,(596,take the False branch),(598,take the False branch),(601,write of variable `commonRoot'),(602,take the False branch),(604,take the True branch),(604,take the False branch),607,(608,take the True branch),609,(610,take the False branch),615,(616,take the True branch),617,(618,take the False branch),(624,take the False branch),685,(686,take the False branch),751,(752,take the True branch),755,(756,take the False branch),(756,take the False branch),(756,take the False branch),(764,take the False branch),(775,take the False branch),(775,take the True branch),776,777,(778,take the True branch),(778,take the True branch),(779,take the False branch),783,785,(786,take the False branch),798,799,(800,take the False branch),822,(823,take the False branch),828,(829,take the False branch),831,833,(834,take the True branch),835,(836,take the False branch),(845,take the False branch),(845,take the True branch),(846,take the True branch),847,(850,take the False branch),852,(858,take the False branch),(858,take the False branch),861,862,(863,take the True branch),(864,take the True branch),(864,take the True branch),865,(866,take the False branch),(868,take the False branch),(871,deref of variable `commonRoot')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `commonRoot' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="368">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1023" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::toString
   line-by-line trace: (1014,take the False branch),1019,1021,(1022,write of variable `n'),(1022,take the True branch),(1023,deref of variable `n')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `n' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="369">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1501" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::checkDeleteExtract
   line-by-line trace: (1490,take the False branch),1495,(1496,take the False branch),(1496,take the False branch),1499,(1500,write of variable `n'),(1500,take the True branch),(1501,deref of variable `n')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `n' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="370">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1606" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::textRects
   line-by-line trace: 1598,1599,(1601,take the False branch),(1601,take the False branch),1604,(1605,write of variable `node'),(1605,take the True branch),(1606,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="371">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1626" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::textQuads
   line-by-line trace: 1618,1619,(1621,take the False branch),(1621,take the False branch),1624,(1625,write of variable `node'),(1625,take the True branch),(1626,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="372">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1924" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::getBorderAndTextQuads
   line-by-line trace: 1918,1919,1920,1922,(1923,write of variable `node'),(1923,take the True branch),(1924,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="373">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1929" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Range.cpp">
   <explanation>
   function or method: WebCore::Range::getBorderAndTextQuads
   line-by-line trace: 1918,1919,1920,1922,(1923,take the False branch),(1928,write of variable `node'),(1928,take the True branch),(1929,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="374">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="331" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/XMLTokenizer.cpp">
   <explanation>
   function or method: WebCore::XMLTokenizer::notifyFinished
   line-by-line trace: (315,take the False branch),(316,take the True branch),(316,take the False branch),318,319,321,322,324,325,(327,write of variable `scriptElement'),(328,take the True branch),(328,take the False branch),(330,take the True branch),(331,deref of variable `scriptElement')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `scriptElement' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="375">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="479" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/XMLTokenizerLibxml2.cpp">
   <explanation>
   function or method: WebCore::XMLParserContext::createStringParser
   line-by-line trace: (470,take the True branch),471,472,473,474,475,(478,write of variable `parser'),(479,deref of variable `parser')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `parser' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="376">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="720" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/ApplyStyleCommand.cpp">
   <explanation>
   function or method: WebCore::ApplyStyleCommand::applyRelativeFontStyleChange
   line-by-line trace: 638,(639,take the False branch),646,(647,take the False branch),649,(650,take the False branch),658,(659,take the False branch),662,663,(664,take the True branch),665,666,667,(671,take the False branch),(676,take the True branch),(676,take the True branch),677,678,679,683,(684,take the False branch),688,(689,take the True branch),690,691,697,(698,take the False branch),701,703,704,(705,take the True branch),(705,take the True branch),706,710,(711,take the False branch),715,717,(718,write of variable `node'),(718,take the True branch),719,(720,deref of variable `node'),(720,take the False branch),(725,deref of variable `node'),(725,take the True branch),(725,deref of variable `node'),(725,take the True branch),(725,deref of variable `node'),(725,take the True branch),728,729,730,735,737,738,(739,write of variable `node'),740,(741,take the False branch),(745,take the True branch),746,747,(749,take the False branch),753,(718,deref of variable `node'),(718,write of variable `node'),(718,take the True branch),719,(720,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="377">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="127" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/BreakBlockquoteCommand.cpp">
   <explanation>
   function or method: WebCore::BreakBlockquoteCommand::doApply
   line-by-line trace: (47,take the False branch),(51,take the True branch),52,(57,take the False branch),(59,take the False branch),62,66,69,(70,take the False branch),(74,take the False branch),(74,take the False branch),77,79,(83,take the False branch),91,(94,take the False branch),(102,take the True branch),103,(106,take the False branch),(110,write of variable `startNode'),(113,deref of variable `startNode'),(113,take the True branch),114,(115,take the True branch),(116,deref of variable `startNode'),(116,write of variable `startNode'),(117,take the True branch),(117,take the False branch),(127,deref of variable `startNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `startNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="378">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="159" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/DeleteButtonController.cpp">
   <explanation>
   function or method: WebCore::enclosingDeletableElement
   line-by-line trace: (145,take the False branch),148,(149,take the False branch),152,(153,write of variable `container'),(154,take the True branch),(154,take the False branch),(155,take the False branch),(159,deref of variable `container')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `container' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="379">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="430" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/DeleteSelectionCommand.cpp">
   <explanation>
   function or method: WebCore::DeleteSelectionCommand::handleGeneralDelete
   line-by-line trace: 421,(422,write of variable `startNode'),(425,take the True branch),(425,take the True branch),(425,take the True branch),(425,deref of variable `startNode'),(425,take the True branch),426,(427,deref of variable `startNode'),(427,write of variable `startNode'),(430,take the True branch),(430,deref of variable `startNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `startNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="380">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1294" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/SelectionController.cpp">
   <explanation>
   function or method: WebCore::SelectionController::setSelectedRange
   line-by-line trace: (1280,take the False branch),1283,1284,(1285,take the False branch),(1288,write of variable `endContainer'),(1289,take the False branch),(1292,take the False branch),(1293,take the True branch),(1293,take the False branch),(1294,deref of variable `endContainer')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `endContainer' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="381">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1294" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/SelectionController.cpp">
   <explanation>
   function or method: WebCore::SelectionController::setSelectedRange
   line-by-line trace: (1280,take the False branch),1283,(1284,write of variable `startContainer'),(1285,take the False branch),1288,(1289,take the False branch),(1292,take the True branch),(1292,take the False branch),(1293,take the False branch),(1294,deref of variable `startContainer')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `startContainer' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="382">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="658" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/markup.cpp">
   <explanation>
   function or method: WebCore::completeURLs
   line-by-line trace: 652,654,656,(657,write of variable `n'),(657,take the True branch),(658,deref of variable `n'),(658,take the True branch),659,660,661,(662,take the False branch),(657,deref of variable `n'),(657,write of variable `n'),(657,take the True branch),(658,deref of variable `n')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `n' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="383">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="900" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/markup.cpp">
   <explanation>
   function or method: WebCore::createMarkup
   line-by-line trace: 795,(797,take the False branch),800,(801,take the False branch),806,(807,take the False branch),(808,take the True branch),(809,take the False branch),(812,take the True branch),813,815,816,(817,take the False branch),(818,take the False branch),820,(821,take the True branch),(821,take the False branch),(822,take the False branch),825,827,828,829,830,831,833,834,835,(836,take the True branch),(836,take the True branch),(837,take the False branch),843,844,(846,take the True branch),(846,take the False branch),853,(854,take the True branch),(859,take the False branch),(860,take the False branch),(863,write of variable `next'),864,865,(867,take the False branch),(876,take the True branch),(876,take the True branch),(876,take the False branch),(881,take the False branch),(887,take the False branch),(887,take the True branch),(889,take the True branch),890,891,(895,take the False branch),(895,take the True branch),(896,take the True branch),898,899,(900,take the True branch),(900,deref of variable `next')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `next' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="384">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="918" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/markup.cpp">
   <explanation>
   function or method: WebCore::createMarkup
   line-by-line trace: 795,(797,take the False branch),800,(801,take the False branch),806,(807,take the False branch),(808,take the True branch),(809,take the False branch),(812,take the True branch),813,815,816,(817,take the False branch),(818,take the False branch),820,(821,take the True branch),(821,take the False branch),(822,take the False branch),825,827,828,829,830,831,(833,write of variable `startNode'),834,835,(836,take the True branch),(836,take the False branch),853,(854,take the True branch),(859,take the False branch),(860,take the False branch),863,864,865,(867,take the False branch),(876,take the True branch),(876,take the True branch),(876,take the False branch),(881,take the False branch),(887,take the False branch),(887,take the True branch),(889,take the True branch),890,891,(895,take the False branch),(895,take the True branch),(896,take the False branch),(910,take the True branch),(911,take the True branch),(911,take the True branch),(912,take the True branch),(913,take the True branch),(913,take the True branch),(915,take the False branch),(918,deref of variable `startNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `startNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="385">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="154" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/visible_units.cpp">
   <explanation>
   function or method: WebCore::previousBoundary
   line-by-line trace: 77,78,(79,take the False branch),81,82,(83,take the False branch),85,(86,take the False branch),88,(89,take the True branch),(89,take the False branch),92,93,94,96,97,99,(100,take the False branch),117,118,(120,take the True branch),(120,take the False branch),(121,take the False branch),124,125,(126,take the True branch),(126,take the False branch),127,(128,take the True branch),(130,take the True branch),131,138,(139,take the True branch),140,141,(143,take the True branch),146,(147,take the True branch),(147,take the False branch),(150,take the False branch),(152,take the True branch),(153,write of variable `node'),(154,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="386">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="621" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/visible_units.cpp">
   <explanation>
   function or method: WebCore::previousLinePosition
   line-by-line trace: 560,561,562,(563,take the False branch),566,568,(569,take the False branch),(572,write of variable `containingBlock'),573,574,575,576,(577,take the True branch),578,(581,take the False branch),584,(587,take the False branch),(619,take the True branch),(621,deref of variable `containingBlock')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `containingBlock' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="387">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="726" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/visible_units.cpp">
   <explanation>
   function or method: WebCore::nextLinePosition
   line-by-line trace: 669,670,671,(672,take the False branch),675,677,(678,take the False branch),(681,write of variable `containingBlock'),682,683,684,685,(686,take the True branch),687,(690,take the False branch),693,(696,take the True branch),700,701,(702,take the True branch),(702,take the False branch),(704,take the True branch),(705,take the True branch),706,720,(724,take the True branch),(726,deref of variable `containingBlock')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `containingBlock' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="388">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1163" path="chrome-5.0.375.70/third_party/WebKit/WebCore/html/HTMLParser.cpp">
   <explanation>
   function or method: WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks
   line-by-line trace: 1129,1130,1131,1133,1135,(1136,take the True branch),(1136,take the True branch),1139,1140,(1141,write of variable `prev'),1142,1143,1144,(1145,take the True branch),(1145,take the False branch),(1160,take the False branch),(1160,take the False branch),(1163,deref of variable `prev')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prev' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="389">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1289" path="chrome-5.0.375.70/third_party/WebKit/WebCore/html/HTMLParser.cpp">
   <explanation>
   function or method: WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks
   line-by-line trace: 1129,1130,1131,1133,1135,(1136,take the True branch),(1136,take the True branch),1139,1140,1141,1142,1143,1144,(1145,take the True branch),(1145,take the False branch),(1160,take the False branch),(1160,take the False branch),1163,(1164,take the True branch),1165,(1171,take the False branch),1174,(1176,take the True branch),1181,1182,(1183,take the False branch),1205,1206,(1207,take the False branch),(1233,take the True branch),1234,1240,(1250,take the True branch),1251,1253,(1254,take the False branch),1274,(1277,take the True branch),1278,1283,(1284,write of variable `prevElem'),(1285,take the False branch),(1289,deref of variable `prevElem')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prevElem' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="390">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1298" path="chrome-5.0.375.70/third_party/WebKit/WebCore/html/HTMLParser.cpp">
   <explanation>
   function or method: WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks
   line-by-line trace: 1129,1130,1131,1133,1135,(1136,take the True branch),(1136,take the True branch),1139,1140,1141,(1142,write of variable `prevMaxElem'),1143,1144,(1145,take the True branch),(1145,take the False branch),(1160,take the False branch),(1160,take the False branch),1163,(1164,take the False branch),1165,(1171,take the False branch),1174,(1176,take the True branch),1181,1182,(1183,take the False branch),1205,1206,(1207,take the False branch),(1233,take the True branch),1234,1240,(1250,take the True branch),1251,1253,(1254,take the False branch),1274,(1277,take the True branch),1278,1283,1284,(1285,take the False branch),1289,1290,1291,1292,(1293,take the True branch),1297,(1298,deref of variable `prevMaxElem')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prevMaxElem' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="391">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1304" path="chrome-5.0.375.70/third_party/WebKit/WebCore/html/HTMLParser.cpp">
   <explanation>
   function or method: WebCore::HTMLParser::handleResidualStyleCloseTagAcrossBlocks
   line-by-line trace: 1129,1130,1131,1133,1135,(1136,take the True branch),(1136,take the True branch),1139,1140,1141,1142,1143,1144,(1145,take the True branch),(1145,take the False branch),(1160,take the False branch),(1160,take the False branch),1163,(1164,take the True branch),1165,(1171,take the False branch),1174,(1176,take the True branch),1181,1182,(1183,take the False branch),1205,1206,(1207,take the False branch),(1233,take the True branch),1234,1240,(1250,take the True branch),1251,(1253,write of variable `newNodePtr'),(1254,take the False branch),1274,(1277,take the True branch),1278,1283,1284,(1285,take the False branch),1289,1290,1291,1292,(1293,take the True branch),1297,1298,1299,1300,1301,(1302,take the True branch),(1302,take the False branch),1303,(1304,deref of variable `newNodePtr')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `newNodePtr' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="392">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="875" path="chrome-5.0.375.70/third_party/WebKit/WebCore/inspector/InspectorDOMAgent.cpp">
   <explanation>
   function or method: WebCore::InspectorDOMAgent::buildArrayForCSSRules
   line-by-line trace: 871,872,(873,take the True branch),(873,take the True branch),(874,write of variable `rule'),(875,deref of variable `rule')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rule' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="393">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1204" path="chrome-5.0.375.70/third_party/WebKit/WebCore/inspector/InspectorDOMAgent.cpp">
   <explanation>
   function or method: WebCore::InspectorDOMAgent::buildObjectForStyleSheet
   line-by-line trace: 1191,1192,1193,1194,1195,1196,1197,1198,(1199,take the False branch),1201,(1202,take the True branch),(1203,write of variable `rule'),(1204,deref of variable `rule')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rule' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="394">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="123" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/Cache.cpp">
   <explanation>
   function or method: WebCore::Cache::requestResource
   line-by-line trace: (100,take the False branch),(104,write of variable `resource'),(106,take the True branch),(106,cmp_nonnull of variable `resource'),(106,deref of variable `resource'),(106,take the False branch),(109,take the False branch),(116,take the True branch),(118,write of variable `resource'),(119,take the True branch),(119,take the False branch),(123,deref of variable `resource')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `resource' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="395">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="199" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/Cache.cpp">
   <explanation>
   function or method: WebCore::Cache::revalidateResource
   line-by-line trace: (187,take the False branch),(188,take the False branch),(189,take the False branch),(190,take the False branch),(191,take the False branch),(193,take the False branch),197,(198,write of variable `newResource'),(199,deref of variable `newResource')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `newResource' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="396">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="240" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/DocumentLoader.cpp">
   <explanation>
   function or method: WebCore::DocumentLoader::stopLoading
   line-by-line trace: 206,(208,take the True branch),211,(213,take the True branch),214,218,(220,take the False branch),223,224,226,(228,write of variable `frameLoader'),(230,take the False branch),(233,take the False branch),(240,deref of variable `frameLoader')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `frameLoader' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="397">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="393" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/Chrome.cpp">
   <explanation>
   function or method: WebCore::Chrome::setToolTip
   line-by-line trace: 353,354,(357,take the True branch),(357,take the True branch),(358,take the False branch),(374,take the True branch),376,378,(383,take the False branch),(387,take the True branch),(388,take the True branch),(389,take the True branch),390,(391,take the True branch),(392,write of variable `files'),(393,deref of variable `files')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `files' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="398">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2777" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/EventHandler.cpp">
   <explanation>
   function or method: WebCore::EventHandler::handleTouchEvent
   line-by-line trace: 2695,2696,2697,2698,2699,2701,2702,2704,(2706,take the False branch),2765,(2766,write of variable `changedTouch'),2767,(2769,take the True branch),(2775,write of variable `changedTouch'),(2776,take the True branch),(2776,take the False branch),(2777,deref of variable `changedTouch')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `changedTouch' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="399">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2794" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/EventHandler.cpp">
   <explanation>
   function or method: WebCore::EventHandler::handleTouchEvent
   line-by-line trace: 2695,2696,2697,2698,2699,2701,2702,2704,(2706,take the False branch),2765,2766,2767,(2769,take the False branch),(2791,take the True branch),(2792,write of variable `changedTouch'),(2793,take the True branch),(2793,take the False branch),(2794,deref of variable `changedTouch')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `changedTouch' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="400">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2812" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/EventHandler.cpp">
   <explanation>
   function or method: WebCore::EventHandler::handleTouchEvent
   line-by-line trace: 2695,2696,2697,2698,2699,2701,2702,2704,(2706,take the False branch),2765,2766,2767,(2769,take the False branch),(2791,take the True branch),2792,(2793,take the True branch),(2793,take the False branch),2794,(2795,take the False branch),2797,2799,2800,2804,2800,2803,2800,2803,2800,2803,2800,2802,2800,2802,2801,2800,2801,2800,2801,2800,2805,2806,2807,(2809,take the True branch),(2810,write of variable `changedTouch'),(2811,take the True branch),(2811,take the False branch),(2812,deref of variable `changedTouch')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `changedTouch' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="401">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2831" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/EventHandler.cpp">
   <explanation>
   function or method: WebCore::EventHandler::handleTouchEvent
   line-by-line trace: 2695,2696,2697,2698,2699,2701,2702,2704,(2706,take the False branch),2765,2766,2767,(2769,take the False branch),(2791,take the True branch),2792,(2793,take the True branch),(2793,take the False branch),2794,(2795,take the False branch),2797,2799,2800,2804,2800,2803,2800,2803,2800,2803,2800,2802,2800,2802,2801,2800,2801,2800,2801,2800,2805,2806,2807,(2809,take the True branch),2810,(2811,take the True branch),(2811,take the False branch),2812,(2813,take the True branch),(2813,take the False branch),2815,2817,2818,2822,2818,2821,2818,2821,2818,2821,2818,2820,2818,2820,2819,2818,2819,2818,2819,2818,2823,2824,2825,(2828,take the True branch),(2829,write of variable `changedTouch'),(2830,take the True branch),(2830,take the False branch),(2831,deref of variable `changedTouch')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `changedTouch' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="402">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1477" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/FrameView.cpp">
   <explanation>
   function or method: WebCore::FrameView::performPostLayoutTasks
   line-by-line trace: (1465,take the False branch),(1470,take the True branch),(1470,take the True branch),1471,1472,(1475,write of variable `root'),(1477,deref of variable `root')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `root' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="403">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1563" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/FrameView.cpp">
   <explanation>
   function or method: WebCore::FrameView::windowClipRect
   line-by-line trace: (1554,take the True branch),(1554,take the False branch),1557,(1558,take the False branch),(1558,take the False branch),(1562,write of variable `elt'),(1563,deref of variable `elt')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `elt' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="404">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1680" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/FrameView.cpp">
   <explanation>
   function or method: WebCore::FrameView::updateScrollCorner
   line-by-line trace: (1650,write of variable `renderer'),1651,(1653,take the False branch),(1678,take the True branch),(1679,take the True branch),(1680,deref of variable `renderer')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `renderer' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="405">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="319" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/XSSAuditor.cpp">
   <explanation>
   function or method: WebCore::XSSAuditor::xssProtection
   line-by-line trace: 313,(315,write of variable `frame'),(316,deref of variable `frame'),(316,take the True branch),(317,write of variable `frame'),(319,deref of variable `frame')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `frame' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="406">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="92" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/Length.cpp">
   <explanation>
   function or method: WebCore::newCoordsArray
   line-by-line trace: 88,(89,write of variable `data'),90,(91,take the True branch),(92,deref of variable `data')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `data' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="407">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="121" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/image-decoders/jpeg/JPEGImageDecoder.cpp">
   <explanation>
   function or method: WebCore::JPEGImageReader::JPEGImageReader
   line-by-line trace: 93,100,(103,user_error_fun of function `jpeg_std_error'),104,107,(109,write of variable `src'),(110,take the False branch),118,(121,deref of variable `src')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `src' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="408">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="678" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/text/String.cpp">
   <explanation>
   function or method: WebCore::String::latin1
   line-by-line trace: 671,(672,write of variable `characters'),674,675,(677,take the True branch),(678,deref of variable `characters')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `characters' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="409">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1563" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::paintColumnRules
   line-by-line trace: 1549,1550,1551,1552,1553,(1554,take the True branch),(1554,take the False branch),(1555,take the False branch),1559,1560,1561,(1562,write of variable `colRects'),(1563,deref of variable `colRects')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `colRects' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="410">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1599" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::paintColumnContents
   line-by-line trace: 1594,1595,1596,1597,(1598,write of variable `colRects'),(1599,deref of variable `colRects')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `colRects' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="411">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2703" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::lowestPosition
   line-by-line trace: (2649,take the False branch),(2651,take the True branch),(2651,take the False branch),(2651,take the False branch),(2654,take the True branch),(2654,take the False branch),(2654,take the False branch),(2657,take the False branch),(2672,take the False branch),(2674,take the True branch),(2674,take the False branch),(2677,take the False branch),(2679,take the True branch),2680,(2682,take the False branch),(2701,take the True branch),(2702,write of variable `colRects'),(2703,deref of variable `colRects')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `colRects' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="412">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3371" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::hitTestColumns
   line-by-line trace: 3367,3368,3369,(3370,write of variable `colRects'),(3371,deref of variable `colRects')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `colRects' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="413">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3528" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::positionForPointWithInlineChildren
   line-by-line trace: (3485,take the False branch),(3487,take the False branch),3491,(3492,write of variable `firstRootBoxWithChildren'),3493,(3494,take the False branch),3515,3519,(3520,take the False branch),(3522,take the True branch),(3522,take the True branch),(3522,take the True branch),3524,(3527,take the True branch),(3528,take the True branch),(3528,deref of variable `firstRootBoxWithChildren')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `firstRootBoxWithChildren' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="414">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3854" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::adjustPointToColumnContents
   line-by-line trace: (3846,take the False branch),(3849,write of variable `colRects'),3852,3853,(3854,deref of variable `colRects')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `colRects' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="415">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3899" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBlock.cpp">
   <explanation>
   function or method: WebCore::RenderBlock::adjustRectForColumns
   line-by-line trace: (3887,take the False branch),(3890,write of variable `colRects'),3893,3896,3897,3898,(3899,deref of variable `colRects')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `colRects' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="416">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="72" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderFileUploadControl.cpp">
   <explanation>
   function or method: WebCore::RenderFileUploadControl::RenderFileUploadControl
   line-by-line trace: 64,(68,write of variable `list'),69,(70,take the False branch),(71,take the True branch),(72,deref of variable `list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="417">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2954" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderLayer.cpp">
   <explanation>
   function or method: WebCore::RenderLayer::childrenClipRect
   line-by-line trace: 2950,(2951,write of variable `clippingRootLayer'),2952,2953,(2954,deref of variable `clippingRootLayer')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `clippingRootLayer' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="418">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2963" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderLayer.cpp">
   <explanation>
   function or method: WebCore::RenderLayer::selfClipRect
   line-by-line trace: 2959,(2960,write of variable `clippingRootLayer'),2961,2962,(2963,deref of variable `clippingRootLayer')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `clippingRootLayer' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="419">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="158" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListBox.cpp">
   <explanation>
   function or method: WebCore::RenderListBox::scrollToRevealSelection
   line-by-line trace: (154,write of variable `select'),156,(158,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="420">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="297" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListBox.cpp">
   <explanation>
   function or method: WebCore::RenderListBox::paintItemForeground
   line-by-line trace: (296,write of variable `select'),(297,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="421">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="347" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListBox.cpp">
   <explanation>
   function or method: WebCore::RenderListBox::paintItemBackground
   line-by-line trace: (346,write of variable `select'),(347,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="422">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="444" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListBox.cpp">
   <explanation>
   function or method: WebCore::RenderListBox::panScroll
   line-by-line trace: 404,405,406,409,411,413,(414,take the True branch),415,419,422,(424,take the False branch),(427,take the False branch),(430,take the True branch),431,434,436,437,438,(439,take the False branch),442,(443,write of variable `select'),(444,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="423">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="476" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListBox.cpp">
   <explanation>
   function or method: WebCore::RenderListBox::autoscroll
   line-by-line trace: 469,471,(472,take the True branch),(473,write of variable `select'),474,(476,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="424">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="522" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListBox.cpp">
   <explanation>
   function or method: WebCore::RenderListBox::valueChanged
   line-by-line trace: 520,(521,write of variable `select'),(522,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="425">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="182" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::setTextFromOption
   line-by-line trace: (181,write of variable `select'),(182,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="426">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="292" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::showPopup
   line-by-line trace: (274,take the False branch),280,(281,take the False branch),(283,write of variable `select'),284,288,289,290,291,(292,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="427">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="310" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::valueChanged
   line-by-line trace: 305,(306,take the False branch),(306,take the False branch),(309,write of variable `select'),(310,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="428">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="342" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemText
   line-by-line trace: (341,write of variable `select'),(342,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="429">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="357" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemAccessibilityText
   line-by-line trace: (356,write of variable `select'),(357,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="430">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="367" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemToolTip
   line-by-line trace: (366,write of variable `select'),(367,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="431">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="377" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemIsEnabled
   line-by-line trace: (376,write of variable `select'),(377,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="432">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="398" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemStyle
   line-by-line trace: (397,write of variable `select'),(398,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="433">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="418" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemBackgroundColor
   line-by-line trace: (417,write of variable `select'),(418,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="434">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="495" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::listSize
   line-by-line trace: (494,write of variable `select'),(495,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="435">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="501" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::selectedIndex
   line-by-line trace: (500,write of variable `select'),(501,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="436">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="512" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemIsSeparator
   line-by-line trace: (511,write of variable `select'),(512,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="437">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="522" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemIsLabel
   line-by-line trace: (521,write of variable `select'),(522,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="438">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="532" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::itemIsSelected
   line-by-line trace: (531,write of variable `select'),(532,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="439">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="544" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderMenuList.cpp">
   <explanation>
   function or method: WebCore::RenderMenuList::setTextFromItem
   line-by-line trace: (543,write of variable `select'),(544,deref of variable `select')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `select' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="440">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="358" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObjectChildList.cpp">
   <explanation>
   function or method: WebCore::RenderObjectChildList::updateBeforeAfterContent
   line-by-line trace: (327,take the False branch),(330,take the False branch),(330,take the False branch),(333,take the False branch),336,(337,write of variable `child'),340,(343,take the False branch),(347,take the True branch),(347,take the True branch),(347,take the False branch),(352,take the True branch),(352,take the True branch),(352,take the False branch),(358,take the True branch),(358,take the False branch),(358,deref of variable `child')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `child' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="441">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="372" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObjectChildList.cpp">
   <explanation>
   function or method: WebCore::RenderObjectChildList::updateBeforeAfterContent
   line-by-line trace: (327,take the False branch),(330,take the False branch),(330,take the False branch),(333,take the False branch),(336,write of variable `pseudoElementStyle'),337,340,(343,take the False branch),(347,take the True branch),(347,take the True branch),(347,take the False branch),(352,take the True branch),(352,take the True branch),(352,take the False branch),(358,take the True branch),(358,take the False branch),(358,take the True branch),(360,take the True branch),361,362,(363,take the True branch),(369,take the False branch),(372,take the True branch),(372,deref of variable `pseudoElementStyle')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pseudoElementStyle' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="442">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="449" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderObjectChildList.cpp">
   <explanation>
   function or method: WebCore::RenderObjectChildList::updateBeforeAfterContent
   line-by-line trace: (327,take the False branch),(330,take the False branch),(330,take the False branch),(333,take the False branch),336,337,340,(343,take the False branch),(347,take the True branch),(347,take the True branch),(347,take the False branch),(352,take the True branch),(352,take the True branch),(352,take the False branch),(358,take the True branch),(358,take the False branch),(358,take the True branch),(360,take the True branch),361,362,(363,take the True branch),(369,take the False branch),(372,take the True branch),(372,take the False branch),(381,take the False branch),(412,take the True branch),(416,write of variable `generatedContentContainer'),(419,take the True branch),420,421,424,425,426,427,441,(444,take the True branch),(445,take the True branch),(448,write of variable `generatedContentContainer'),(449,deref of variable `generatedContentContainer')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `generatedContentContainer' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="443">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="200" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderTable.cpp">
   <explanation>
   function or method: WebCore::RenderTable::calcWidth
   line-by-line trace: (196,take the False branch),(199,write of variable `cb'),(200,deref of variable `cb')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cb' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="444">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="82" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderText.cpp">
   <explanation>
   function or method: WebCore::makeCapitalized
   line-by-line trace: (54,take the False branch),57,(58,write of variable `characters'),60,(61,take the True branch),(62,take the False branch),70,(71,take the False branch),74,76,77,(78,take the True branch),(79,take the False branch),(81,take the True branch),(82,deref of variable `characters')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `characters' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="445">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="454" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderText.cpp">
   <explanation>
   function or method: WebCore::RenderText::localCaretRect
   line-by-line trace: (419,take the False branch),(422,take the True branch),(422,take the False branch),(423,take the False branch),426,428,429,431,434,435,436,438,439,(442,take the True branch),443,(445,write of variable `cb'),(446,take the False branch),(454,deref of variable `cb')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cb' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="446">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="348" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderThemeChromiumSkia.cpp">
   <explanation>
   function or method: WebCore::paintButtonLike
   line-by-line trace: 305,306,307,308,309,310,(311,take the True branch),312,313,314,317,(320,take the False branch),(320,take the False branch),(327,take the True branch),328,329,330,331,332,334,335,(336,take the True branch),337,338,339,340,341,342,(344,write of variable `shader'),346,347,(348,deref of variable `shader')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `shader' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="447">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="250" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RootInlineBox.cpp">
   <explanation>
   function or method: WebCore::RootInlineBox::fillLineSelectionGap
   line-by-line trace: 239,241,242,244,(246,write of variable `firstBox'),247,(248,take the True branch),249,(250,deref of variable `firstBox')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `firstBox' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="448">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="254" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RootInlineBox.cpp">
   <explanation>
   function or method: WebCore::RootInlineBox::fillLineSelectionGap
   line-by-line trace: 239,241,242,244,246,(247,write of variable `lastBox'),(248,take the True branch),249,250,249,(252,take the True branch),253,(254,deref of variable `lastBox')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lastBox' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="449">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1047" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/SVGRootInlineBox.cpp">
   <explanation>
   function or method: WebCore::SVGRootInlineBox::buildLayoutInformation
   line-by-line trace: (1006,take the False branch),1016,(1018,take the True branch),(1019,take the False branch),(1022,take the False branch),1023,(1025,take the False branch),1028,1029,(1031,take the True branch),(1031,take the False branch),(1037,take the True branch),1038,(1041,write of variable `textContent'),1042,(1043,take the True branch),(1043,take the False branch),(1045,take the True branch),(1045,take the False branch),(1047,deref of variable `textContent')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `textContent' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="450">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1425" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/SVGRootInlineBox.cpp">
   <explanation>
   function or method: WebCore::SVGRootInlineBox::buildLayoutInformationForTextBox
   line-by-line trace: 1214,(1215,take the True branch),(1215,take the False branch),1217,(1218,take the True branch),(1218,take the False branch),1220,1221,1223,1225,1226,1228,(1229,take the True branch),1230,(1232,take the True branch),1233,1235,1236,1238,1240,1241,(1242,take the True branch),1243,1244,1245,1252,1253,(1255,take the True branch),(1255,take the False branch),(1255,take the True branch),(1255,take the True branch),(1256,take the True branch),1257,1259,1260,1261,(1264,take the True branch),(1264,take the False branch),(1264,take the True branch),(1264,take the True branch),(1265,take the True branch),1266,1268,1269,1270,1273,1274,(1277,take the True branch),1278,1280,1281,(1283,take the True branch),1284,(1288,take the True branch),1289,1291,1292,(1294,take the True branch),1295,1299,(1301,take the True branch),1302,(1304,take the False branch),(1308,take the True branch),1309,(1312,take the False branch),(1312,take the True branch),1313,1314,(1317,take the True branch),(1317,take the False branch),1324,1326,1327,1328,(1332,take the True branch),(1333,take the True branch),1334,(1336,take the True branch),(1336,take the True branch),1337,1341,(1344,take the True branch),(1344,take the True branch),(1345,take the True branch),1346,1347,1348,1357,1358,1360,1361,1363,(1367,take the False branch),(1371,take the True branch),1372,1373,(1375,take the True branch),1376,1382,1384,1385,1386,(1389,take the False branch),1399,(1401,take the True branch),1402,1404,1405,(1408,take the False branch),1412,1413,1417,(1419,write of variable `svgFont'),(1420,take the False branch),(1423,take the True branch),(1423,take the True branch),1424,(1425,deref of variable `svgFont')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `svgFont' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="451">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="61" path="chrome-5.0.375.70/third_party/WebKit/WebCore/websockets/WebSocket.cpp">
   <explanation>
   function or method: WebCore::isValidProtocolString
   line-by-line trace: (55,take the False branch),(57,take the False branch),(59,write of variable `characters'),(60,take the True branch),(61,deref of variable `characters')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `characters' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="452">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="324" path="chrome-5.0.375.70/third_party/WebKit/WebCore/xml/XPathStep.cpp">
   <explanation>
   function or method: WebCore::XPath::Step::nodesInAxis
   line-by-line trace: (238,take the True branch),(238,take the False branch),239,318,(319,take the True branch),320,(322,write of variable `n'),(323,deref of variable `n'),(323,take the True branch),(324,deref of variable `n'),(324,write of variable `n'),(324,take the True branch),(325,take the False branch),(324,deref of variable `n')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `n' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="453">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="101" path="chrome-5.0.375.70/third_party/WebKit/WebCore/xml/XSLImportRule.cpp">
   <explanation>
   function or method: WebCore::XSLImportRule::loadSheet
   line-by-line trace: (80,write of variable `docLoader'),81,82,(83,take the False branch),(85,take the False branch),88,89,(90,take the False branch),(96,take the False branch),(101,deref of variable `docLoader')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `docLoader' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="454">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="183" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebDevToolsAgentImpl.cpp">
   <explanation>
   function or method: WebKit::WebDevToolsAgentImpl::attach
   line-by-line trace: (165,take the False branch),167,169,167,171,(174,write of variable `ic'),177,178,179,963,179,(181,take the True branch),182,(183,deref of variable `ic')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ic' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="455">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="373" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebDevToolsAgentImpl.cpp">
   <explanation>
   function or method: WebKit::WebDevToolsAgentImpl::setInspectorFrontendProxyToInspectorController
   line-by-line trace: 369,370,(372,write of variable `ic'),(373,deref of variable `ic')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ic' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="456">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="440" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebDevToolsAgentImpl.cpp">
   <explanation>
   function or method: WebKit::WebDevToolsAgentImpl::jsEvaluateOnSelf
   line-by-line trace: 430,432,433,(434,take the False branch),(434,take the False branch),437,438,(439,write of variable `proxy'),(440,deref of variable `proxy')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `proxy' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="457">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="514" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebDevToolsAgentImpl.cpp">
   <explanation>
   function or method: WebKit::WebDevToolsAgentImpl::evaluateInWebInspector
   line-by-line trace: (513,write of variable `ic'),(514,deref of variable `ic')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ic' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="458">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="523" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebDevToolsAgentImpl.cpp">
   <explanation>
   function or method: WebKit::WebDevToolsAgentImpl::setTimelineProfilingEnabled
   line-by-line trace: (519,write of variable `ic'),(520,take the False branch),(523,deref of variable `ic')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ic' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="459">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1830" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebFrameImpl.cpp">
   <explanation>
   function or method: WebKit::WebFrameImpl::createFrameView
   line-by-line trace: (1808,take the False branch),1810,(1811,take the False branch),(1812,take the False branch),1814,(1815,take the True branch),(1815,take the True branch),1816,1818,(1820,write of variable `webView'),1822,(1823,take the False branch),1826,1828,(1830,deref of variable `webView')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `webView' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="460">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="48" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebMediaPlayerClientImpl.cpp">
   <explanation>
   function or method: WebKit::createWebMediaPlayer
   line-by-line trace: (47,write of variable `webFrame'),(48,deref of variable `webFrame')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `webFrame' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="461">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="96" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebWorkerClientImpl.cpp">
   <explanation>
   function or method: WebKit::WebWorkerClientImpl::createWorkerContextProxy
   line-by-line trace: 89,90,(92,take the True branch),93,94,93,(95,write of variable `webFrame'),(96,deref of variable `webFrame')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `webFrame' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="462">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="375" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/utils.c">
   <explanation>
   function or method: avcodec_default_release_buffer
   line-by-line trace: 358,359,361,362,(364,take the True branch),(365,write of variable `buf'),(366,take the False branch),369,371,372,373,(375,deref of variable `buf')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `buf' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="463">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2231" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/utils.c">
   <explanation>
   function or method: av_find_stream_info
   line-by-line trace: 2117,2118,2119,2120,2121,2122,2123,2124,2125,2127,(2128,take the False branch),(2130,take the False branch),(2159,take the False branch),2163,2164,2165,(2166,take the False branch),(2173,take the True branch),2174,(2175,take the True branch),2176,2184,(2186,take the True branch),(2190,take the False branch),(2198,take the False branch),2206,(2207,take the False branch),(2209,take the False branch),(2225,write of variable `pkt'),(2226,take the False branch),(2231,deref of variable `pkt')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pkt' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="464">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1071" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-arabic.c">
   <explanation>
   function or method: arabicSyriacOpenTypeShape
   line-by-line trace: 1033,1034,1035,1036,1037,1038,(1039,write of variable `apply'),1040,1041,1043,(1045,take the False branch),1047,(1049,take the False branch),(1050,take the True branch),(1050,write of variable `apply'),1052,1054,1055,1056,(1057,take the True branch),1058,1059,1060,(1062,take the False branch),(1065,take the True branch),1066,(1070,take the True branch),(1071,deref of variable `apply')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `apply' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="465">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="193" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-hangul.c">
   <explanation>
   function or method: hangul_shape_syllable
   line-by-line trace: 141,142,144,147,148,(150,take the True branch),151,152,154,(153,take the True branch),(153,take the True branch),(154,take the False branch),(169,take the True branch),170,171,174,177,176,(174,take the False branch),(179,take the False branch),(188,take the True branch),(188,take the True branch),189,(191,write of variable `logClusters'),(191,take the True branch),(191,write of variable `logClusters'),(192,take the True branch),(193,deref of variable `logClusters')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `logClusters' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="466">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="85" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-hebrew.c">
   <explanation>
   function or method: HB_HebrewShape
   line-by-line trace: (57,take the True branch),59,(62,take the False branch),75,76,77,79,80,81,82,(84,write of variable `shapedChars'),(84,take the True branch),(84,write of variable `shapedChars'),(85,deref of variable `shapedChars')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `shapedChars' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="467">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1213" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-indic.cpp">
   <explanation>
   function or method: indic_shape_syllable
   line-by-line trace: 1191,(1192,take the True branch),(1192,take the True branch),1193,1194,1195,1196,1197,1199,1200,(1202,take the False branch),(1207,write of variable `reordered'),(1207,take the True branch),(1207,write of variable `reordered'),(1208,take the True branch),1210,(1212,take the True branch),(1213,deref of variable `reordered')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `reordered' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="468">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1290" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-indic.cpp">
   <explanation>
   function or method: indic_shape_syllable
   line-by-line trace: 1191,(1192,take the True branch),(1192,take the True branch),1193,1194,1195,1196,1197,1199,1200,(1202,take the False branch),(1207,take the True branch),(1208,write of variable `position'),(1208,take the True branch),(1208,write of variable `position'),1210,(1212,take the True branch),1213,1214,1215,(1219,take the True branch),1220,1222,1223,1224,(1233,take the True branch),1234,1235,(1254,take the False branch),(1254,take the True branch),(1254,take the True branch),1256,(1255,take the True branch),(1255,take the True branch),(1256,take the False branch),(1256,take the False branch),(1259,take the True branch),(1259,take the True branch),1260,(1262,take the True branch),1263,1265,1266,1272,(1273,take the False branch),(1273,take the False branch),(1289,take the True branch),(1290,deref of variable `position')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `position' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="469">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1544" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-indic.cpp">
   <explanation>
   function or method: indic_shape_syllable
   line-by-line trace: 1191,(1192,take the True branch),(1192,take the True branch),1193,1194,1195,1196,1197,1199,1200,(1202,take the False branch),(1207,take the True branch),(1208,take the True branch),1210,(1212,take the True branch),1213,1214,1215,(1219,take the True branch),1220,1222,1223,1224,(1233,take the False branch),(1499,take the True branch),(1501,take the False branch),1507,1509,1512,1511,(1509,take the False branch),1516,1517,(1518,take the False branch),(1528,take the False branch),(1532,take the True branch),(1540,write of variable `clusters'),(1540,take the True branch),(1540,write of variable `clusters'),(1541,take the False branch),(1543,take the True branch),(1544,deref of variable `clusters')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `clusters' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="470">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1548" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-indic.cpp">
   <explanation>
   function or method: indic_shape_syllable
   line-by-line trace: 1191,(1192,take the True branch),(1192,take the True branch),1193,1194,1195,1196,1197,1199,1200,(1202,take the False branch),(1207,take the True branch),(1208,take the True branch),1210,(1212,take the True branch),1213,1214,1215,(1219,take the True branch),1220,1222,1223,1224,(1233,take the False branch),(1499,take the True branch),(1501,take the False branch),1507,1509,1512,1511,(1509,take the False branch),1516,1517,(1518,take the False branch),(1528,take the False branch),(1532,take the True branch),(1540,take the True branch),(1541,write of variable `properties'),(1541,take the True branch),(1541,write of variable `properties'),(1543,take the False branch),(1547,take the True branch),(1548,deref of variable `properties')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `properties' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="471">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="70" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-thai.c">
   <explanation>
   function or method: thaiWordBreaks
   line-by-line trace: 34,35,36,37,(38,write of variable `break_positions'),39,40,(42,take the False branch),(46,take the True branch),(46,take the True branch),47,(48,take the True branch),49,(52,take the False branch),55,(56,take the False branch),(59,write of variable `break_positions'),60,(61,take the True branch),(62,write of variable `break_positions'),63,(66,take the False branch),(69,take the True branch),(70,deref of variable `break_positions')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `break_positions' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="472">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="120" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-tibetan.c">
   <explanation>
   function or method: tibetan_shape_syllable
   line-by-line trace: 105,106,107,109,111,(112,write of variable `reordered'),(112,take the True branch),(112,write of variable `reordered'),(114,take the False branch),(119,take the True branch),(120,deref of variable `reordered')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `reordered' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="473">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1914" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::compound_check
   line-by-line trace: 1553,1554,(1555,write of variable `rv'),1556,1557,1558,1559,1560,1561,1562,1563,1564,1565,1566,1567,1568,1570,1572,1574,(1576,take the True branch),1578,1579,1580,(1583,take the False branch),1588,(1590,take the True branch),(1591,take the True branch),(1591,take the False branch),(1592,take the False branch),(1594,take the False branch),1595,1596,1597,1598,1599,1601,1602,1603,1604,1605,1607,1611,1612,1614,1615,(1619,write of variable `rv'),(1622,take the False branch),(1638,take the True branch),(1639,take the False branch),(1652,take the False branch),1655,(1653,take the True branch),(1653,take the True branch),(1654,take the True branch),(1654,write of variable `rv'),(1655,take the True branch),(1655,write of variable `rv'),(1656,take the True branch),(1656,take the True branch),(1657,take the True branch),(1657,write of variable `rv'),(1658,take the True branch),(1658,write of variable `rv'),(1658,cmp_nonnull of variable `rv'),1659,(1670,take the True branch),(1670,cmp_nonnull of variable `rv'),(1670,take the True branch),1673,(1671,take the True branch),(1671,take the True branch),1672,1671,1672,(1671,take the False branch),(1674,take the True branch),(1674,take the True branch),1675,1674,1675,(1674,take the True branch),(1677,write of variable `rv'),(1681,take the True branch),(1681,cmp_nonnull of variable `rv'),(1681,take the True branch),(1681,take the True branch),(1681,take the True branch),1684,(1682,take the True branch),(1682,take the True branch),1683,1682,1683,(1682,take the False branch),(1685,take the True branch),(1685,take the False branch),(1692,take the True branch),(1692,cmp_nonnull of variable `rv'),(1692,take the True branch),(1692,take the True branch),(1692,take the True branch),(1692,take the True branch),1695,(1693,take the True branch),(1693,take the True branch),1694,1693,1694,(1693,take the False branch),(1696,take the True branch),(1696,take the True branch),1697,1696,1697,(1696,take the True branch),(1699,write of variable `rv'),(1703,take the True branch),(1703,deref of variable `rv'),(1703,take the True branch),(1703,deref of variable `rv'),(1703,deref of variable `rv'),(1703,take the False branch),(1704,take the True branch),(1704,take the True branch),(1704,deref of variable `rv'),(1704,deref of variable `rv'),(1704,take the False branch),(1709,take the True branch),(1709,cmp_nonnull of variable `rv'),(1709,take the True branch),(1710,deref of variable `rv'),(1710,deref of variable `rv'),(1709,take the True branch),1711,1747,1736,1730,(1715,take the False branch),(1747,take the True branch),(1747,take the True branch),(1747,take the True branch),(1747,write of variable `rv'),(1748,cmp_nonnull of variable `rv'),(1748,take the True branch),(1748,take the True branch),(1749,take the False branch),1750,1749,1750,(1749,take the True branch),(1757,take the True branch),1759,(1762,take the True branch),(1762,take the True branch),1768,1769,1771,(1774,take the True branch),(1775,take the True branch),1776,1777,(1781,write of variable `rv'),(1784,take the False branch),(1794,take the True branch),(1794,cmp_nonnull of variable `rv'),(1794,take the False branch),1796,1797,(1800,take the True branch),(1800,cmp_nonnull of variable `rv'),(1800,take the True branch),(1800,deref of variable `rv'),(1800,deref of variable `rv'),(1800,take the True branch),(1800,deref of variable `rv'),(1800,deref of variable `rv'),(1800,take the True branch),1801,(1806,take the True branch),(1806,cmp_nonnull of variable `rv'),(1806,take the False branch),(1812,take the True branch),(1812,deref of variable `rv'),(1812,take the True branch),(1812,deref of variable `rv'),(1812,deref of variable `rv'),(1812,take the False branch),(1813,take the True branch),(1813,take the True branch),(1813,deref of variable `rv'),(1813,deref of variable `rv'),(1813,take the False branch),1837,1832,1828,1824,(1820,take the True branch),(1821,cmp_nonnull of variable `rv'),(1821,take the True branch),(1821,deref of variable `rv'),(1821,deref of variable `rv'),(1821,take the False branch),(1822,take the True branch),(1822,deref of variable `rv'),(1822,deref of variable `rv'),(1822,take the True branch),(1825,take the False branch),(1825,take the False branch),(1826,take the True branch),(1827,deref of variable `rv'),(1827,deref of variable `rv'),(1827,take the True branch),(1831,take the False branch),(1831,take the False branch),(1831,take the True branch),(1834,take the False branch),(1834,take the True branch),(1837,take the False branch),(1837,take the False branch),(1838,deref of variable `rv'),(1838,deref of variable `rv'),(1837,take the False branch),1846,1847,1850,1851,(1852,take the True branch),(1852,write of variable `rv'),(1853,take the False branch),(1859,take the True branch),(1859,take the True branch),(1859,take the True branch),(1860,write of variable `rv'),(1861,take the True branch),(1861,cmp_nonnull of variable `rv'),(1861,take the False branch),(1862,write of variable `rv'),(1866,take the False branch),(1870,take the False branch),(1873,take the False branch),(1884,take the False branch),(1892,take the True branch),1894,(1898,take the True branch),1899,1900,1901,(1905,take the True branch),(1905,take the True branch),(1910,take the True branch),1911,(1914,deref of variable `rv')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rv' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="474">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2330" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::compound_check_morph
   line-by-line trace: 2001,2002,2003,2005,2006,2007,2008,2009,2011,2012,2014,2015,2017,2019,(2021,take the True branch),2022,2023,2024,(2027,take the True branch),(2028,take the False branch),(2029,take the False branch),2032,2033,2034,2037,(2038,take the True branch),2040,(2043,take the True branch),(2043,take the True branch),(2044,take the True branch),(2044,take the False branch),2049,2047,(2045,take the True branch),(2045,take the True branch),(2045,take the False branch),(2046,take the True branch),(2046,take the True branch),2047,(2046,take the False branch),(2048,take the True branch),(2048,take the True branch),(2048,take the True branch),2049,(2048,take the False branch),(2050,take the True branch),(2051,take the True branch),(2051,take the True branch),(2051,take the False branch),(2052,take the False branch),(2045,take the False branch),(2057,take the False branch),(2068,take the False branch),(2110,take the True branch),(2110,take the False branch),2111,(2110,take the False branch),(2117,take the True branch),(2117,take the True branch),2120,(2118,take the True branch),(2118,take the True branch),2119,2118,2119,(2118,take the False branch),(2121,take the True branch),(2121,take the True branch),2122,2121,2122,(2121,take the False branch),(2128,take the True branch),(2128,take the True branch),(2128,take the False branch),(2139,take the True branch),(2139,take the True branch),(2139,take the True branch),(2139,take the True branch),(2139,take the True branch),2142,(2140,take the True branch),(2140,take the True branch),2141,2140,2141,(2140,take the False branch),(2143,take the True branch),(2143,take the True branch),2144,2143,2144,(2143,take the True branch),2146,(2150,take the True branch),(2150,take the True branch),(2150,take the False branch),(2153,take the True branch),(2153,take the True branch),2154,(2153,take the True branch),2155,2189,2174,(2159,take the True branch),2165,2162,2161,(2160,take the False branch),(2160,take the True branch),(2160,take the True branch),2183,2179,2175,(2174,take the True branch),(2174,take the True branch),(2175,take the True branch),(2176,take the True branch),(2176,take the False branch),(2177,take the False branch),(2182,take the True branch),(2182,take the True branch),(2182,take the False branch),(2185,take the True branch),(2185,take the False branch),(2174,take the True branch),(2200,take the True branch),2202,(2205,take the True branch),(2205,take the True branch),2210,2211,(2214,take the True branch),(2214,take the True branch),(2214,take the False branch),2216,(2215,take the True branch),(2215,take the True branch),(2215,take the False branch),(2216,take the True branch),(2216,take the True branch),(2216,take the False branch),(2217,take the False branch),(2215,take the False branch),(2221,take the True branch),(2221,take the False branch),2243,2244,(2247,take the True branch),(2247,take the True branch),(2247,take the True branch),(2247,take the True branch),2248,(2252,take the True branch),(2252,take the True branch),2253,(2252,take the True branch),2254,(2258,take the True branch),(2258,take the True branch),(2258,take the False branch),2276,2271,(2267,take the True branch),(2268,take the True branch),(2268,take the False branch),(2269,take the True branch),(2269,take the True branch),(2272,take the False branch),(2272,take the False branch),(2273,take the False branch),2305,2306,2309,2310,(2312,take the False branch),(2314,take the True branch),(2314,take the True branch),2315,2316,2317,(2320,take the True branch),(2320,take the True branch),(2320,take the True branch),2321,(2322,take the True branch),(2322,take the True branch),(2322,take the True branch),(2323,write of variable `m'),(2324,take the False branch),(2325,take the True branch),(2325,take the False branch),2329,(2330,take the False branch),(2330,deref of variable `m')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `m' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="475">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4155" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::parse_affix
   line-by-line trace: 4051,4053,4055,(4056,write of variable `ptr'),4057,4059,4060,4061,4062,4071,4073,(4074,take the False branch),(4126,take the False branch),4137,(4140,take the True branch),(4141,take the False branch),4142,4143,4144,4145,4148,(4149,take the True branch),(4150,take the True branch),4151,4153,4154,(4155,take the True branch),(4155,deref of variable `ptr')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ptr' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="476">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="179" path="chrome-5.0.375.70/third_party/hunspell/src/parsers/textparser.cxx">
   <explanation>
   function or method: TextParser::next_token
   line-by-line trace: 158,160,161,173,(174,take the False branch),(176,take the True branch),177,(178,write of variable `t'),(179,deref of variable `t')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `t' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="477">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1153" path="chrome-5.0.375.70/third_party/icu/source/common/locid.cpp">
   <explanation>
   function or method: icu_4_2::Locale::getLocale
   line-by-line trace: (1146,write of variable `localeCache'),(1148,take the True branch),1151,(1153,deref of variable `localeCache')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `localeCache' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="478">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="215" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,210,212,213,(214,write of variable `orNode'),(215,deref of variable `orNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `orNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="479">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="229" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,220,226,227,(228,write of variable `catNode'),(229,deref of variable `catNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `catNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="480">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="325" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,307,309,(310,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(310,take the False branch),(320,take the True branch),321,322,(323,write of variable `catNode'),324,(325,deref of variable `catNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `catNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="481">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="328" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,307,309,(310,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(310,take the False branch),(320,take the True branch),321,(322,write of variable `endNode'),323,324,325,326,327,(328,deref of variable `endNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `endNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="482">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="351" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,307,309,(310,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(310,take the False branch),(320,take the False branch),(340,take the True branch),(342,take the True branch),348,349,(350,write of variable `orNode'),(351,deref of variable `orNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `orNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="483">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="391" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,387,389,(390,write of variable `plusNode'),(391,deref of variable `plusNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `plusNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="484">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="400" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,396,398,(399,write of variable `qNode'),(400,deref of variable `qNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `qNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="485">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="409" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: 198,200,202,405,407,(408,write of variable `starNode'),(409,deref of variable `starNode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `starNode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="486">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="443" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::doParseActions
   line-by-line trace: (198,write of variable `n'),200,202,440,(442,write of variable `n'),(443,deref of variable `n')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `n' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="487">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1056" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::parse
   line-by-line trace: 920,921,(923,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(923,take the False branch),927,928,937,(940,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(940,take the True branch),941,1042,(1051,take the True branch),1052,(1053,write of variable `operand'),1054,1055,(1056,deref of variable `operand')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `operand' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="488">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1194" path="chrome-5.0.375.70/third_party/icu/source/common/rbbiscan.cpp">
   <explanation>
   function or method: icu_4_2::RBBIRuleScanner::scanSet
   line-by-line trace: 1137,1138,1139,1140,(1142,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1142,take the False branch),1146,1147,1148,(1149,user_error_fun of function `_ZN7icu_4_210UnicodeSetC1ERKNS_13UnicodeStringERNS_13ParsePositionEjPKNS_11SymbolTableER10UErrorCode'),(1152,take the False branch),(1155,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1155,take the False branch),(1168,take the False branch),1182,1183,(1184,take the True branch),1185,1187,(1190,user_error_fun of function `_Z9U_SUCCESS10UErrorCode'),(1190,take the True branch),1191,(1193,write of variable `n'),(1194,deref of variable `n')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `n' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="489">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="576" path="chrome-5.0.375.70/third_party/icu/source/common/ucase.c">
   <explanation>
   function or method: ucase_addCaseClosure_4_2
   line-by-line trace: 473,483,498,500,(503,take the False branch),(503,take the False branch),(503,take the False branch),(503,take the True branch),(504,take the False branch),517,518,519,520,522,(525,take the False branch),(534,take the False branch),540,(541,write of variable `closure'),(545,take the False branch),(575,take the True branch),(576,deref of variable `closure')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `closure' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="490">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1641" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv_bld.c">
   <explanation>
   function or method: ucnv_swap_4_2
   line-by-line trace: 1334,1335,1337,1338,1340,1341,1343,1344,1346,1347,1348,1349,1350,1352,1354,1356,1357,1360,(1361,take the False branch),(1361,take the False branch),1366,1372,1371,1370,1369,(1368,take the False branch),(1367,take the False branch),1383,1384,1387,1388,(1390,take the True branch),1391,(1404,take the False branch),1423,1424,(1425,take the False branch),(1430,take the True branch),1432,1433,(1435,take the True branch),(1435,take the False branch),(1441,take the False branch),(1443,take the True branch),(1443,take the True branch),1444,(1445,take the True branch),1447,1448,1456,1457,1458,1459,1460,1461,1462,1463,1466,1467,(1468,take the True branch),(1468,take the False branch),1475,1476,1477,1478,1479,1480,1481,1482,1483,1485,1490,1501,1502,1504,(1503,take the True branch),(1503,take the True branch),(1504,take the True branch),(1504,take the True branch),1506,1507,(1510,take the True branch),1511,(1512,take the True branch),1513,(1517,write of variable `inExtIndexes'),(1531,take the True branch),(1532,take the False branch),(1540,take the True branch),1541,1545,1546,1547,1546,(1549,take the False branch),1564,1565,1566,1567,1566,1570,1571,1572,1573,1572,1576,1577,1578,1579,1578,1582,(1584,take the False branch),(1593,take the True branch),1594,1598,1599,1598,1602,1603,1604,1605,1604,1608,(1609,take the True branch),1610,1621,1623,(1626,take the False branch),(1635,take the True branch),1637,1638,(1641,deref of variable `inExtIndexes')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `inExtIndexes' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="491">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1412" path="chrome-5.0.375.70/third_party/icu/source/common/ucnvmbcs.c">
   <explanation>
   function or method: ucnv_MBCSLoad
   line-by-line trace: 1343,1344,1345,1346,1347,1348,(1350,take the True branch),1351,1361,(1362,take the True branch),(1362,take the False branch),1368,(1369,take the True branch),1370,(1373,take the True branch),1374,1375,1376,1377,(1380,take the False branch),(1386,take the False branch),1393,(1394,take the False branch),1401,1402,1403,1404,1405,1406,1407,(1408,write of variable `baseSharedData'),(1409,take the False branch),(1412,deref of variable `baseSharedData')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `baseSharedData' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="492">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1114" path="chrome-5.0.375.70/third_party/icu/source/common/udata.c">
   <explanation>
   function or method: doLoadFromCommonData
   line-by-line trace: 1094,1095,1096,1097,1107,(1108,user_error_fun of function `_Z14openCommonDataPKcaP10UErrorCode'),(1108,write of variable `pCommonData'),(1110,take the True branch),1111,(1114,deref of variable `pCommonData')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pCommonData' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="493">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="424" path="chrome-5.0.375.70/third_party/icu/source/common/uhash.c">
   <explanation>
   function or method: _uhash_rehash
   line-by-line trace: 394,395,396,397,(399,take the True branch),(400,take the False branch),(411,user_error_fun of function `_Z15_uhash_allocateP10UHashtableiP10UErrorCode'),(413,take the False branch),(419,take the True branch),(420,take the True branch),(421,write of variable `e'),(424,deref of variable `e')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `e' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="494">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="449" path="chrome-5.0.375.70/third_party/icu/source/common/uhash.c">
   <explanation>
   function or method: _uhash_remove
   line-by-line trace: 444,(445,write of variable `e'),447,448,(449,deref of variable `e')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `e' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="495">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="497" path="chrome-5.0.375.70/third_party/icu/source/common/uhash.c">
   <explanation>
   function or method: _uhash_put
   line-by-line trace: 471,472,473,(475,take the False branch),(480,take the True branch),(480,take the False branch),(486,take the False branch),493,(494,write of variable `e'),(497,deref of variable `e')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `e' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="496">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="916" path="chrome-5.0.375.70/third_party/icu/source/common/uhash.c">
   <explanation>
   function or method: uhash_equals_4_2
   line-by-line trace: 881,(883,take the False branch),897,896,(895,take the False branch),(895,take the False branch),(896,take the False branch),(897,take the False branch),(898,take the False branch),907,908,(909,take the False branch),913,(914,take the True branch),(915,write of variable `elem1'),(916,deref of variable `elem1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `elem1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="497">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2862" path="chrome-5.0.375.70/third_party/icu/source/common/uloc.c">
   <explanation>
   function or method: _uloc_getOrientationHelper
   line-by-line trace: 2842,(2844,take the True branch),2845,2846,2848,(2850,take the True branch),(2851,user_error_fun of function `_Z31_res_getTableStringWithFallbackPKcS0_S0_S0_S0_PiP10UErrorCode'),2858,(2851,write of variable `value'),(2861,take the True branch),(2861,take the True branch),(2862,deref of variable `value')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `value' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="498">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="428" path="chrome-5.0.375.70/third_party/icu/source/common/uloc_tag.c">
   <explanation>
   function or method: _addVariantToList
   line-by-line trace: 414,(416,take the False branch),420,421,(424,write of variable `prev'),425,426,(427,take the True branch),(428,deref of variable `prev')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prev' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="499">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="472" path="chrome-5.0.375.70/third_party/icu/source/common/uloc_tag.c">
   <explanation>
   function or method: _addExtensionToList
   line-by-line trace: 458,(460,take the False branch),464,465,(468,write of variable `prev'),469,470,(471,take the True branch),(472,deref of variable `prev')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prev' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="500">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1824" path="chrome-5.0.375.70/third_party/icu/source/common/uloc_tag.c">
   <explanation>
   function or method: ultag_parse
   line-by-line trace: 1574,1575,1576,1577,1578,1579,1580,1581,1582,1583,(1585,take the True branch),1586,(1589,take the False branch),(1593,take the True branch),1594,1598,(1599,take the False branch),1603,1604,(1607,take the False branch),1612,1613,1614,(1615,take the False branch),(1621,take the False branch),(1627,take the False branch),1648,1649,1650,(1651,write of variable `pExtension'),1652,1653,1654,(1656,take the True branch),1657,1659,1662,(1663,take the True branch),(1664,take the True branch),1665,1667,(1669,take the True branch),1671,1675,(1677,take the False branch),(1687,take the True branch),(1688,take the False branch),(1701,take the False branch),(1711,take the False branch),(1721,take the True branch),(1722,take the False branch),(1744,take the True branch),(1745,take the False branch),(1795,take the True branch),(1796,take the True branch),(1797,take the True branch),(1798,take the True branch),(1800,take the False branch),1805,1806,1807,(1824,deref of variable `pExtension')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pExtension' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="501">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="401" path="chrome-5.0.375.70/third_party/icu/source/common/uresbund.c">
   <explanation>
   function or method: findFirstExisting
   line-by-line trace: (389,write of variable `r'),390,391,392,(394,take the True branch),(394,take the True branch),(395,user_error_fun of function `_Z10init_entryPKcS0_P10UErrorCode'),(395,write of variable `r'),(397,take the False branch),400,(401,deref of variable `r')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `r' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="502">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="859" path="chrome-5.0.375.70/third_party/icu/source/common/uresbund.c">
   <explanation>
   function or method: init_resb_result
   line-by-line trace: (700,take the False branch),(700,take the False branch),(703,take the False branch),(707,take the True branch),(708,take the True branch),709,710,(711,take the True branch),713,714,715,730,(731,take the True branch),732,(736,take the True branch),737,(739,take the True branch),740,741,750,(752,take the True branch),754,(755,take the True branch),756,761,(762,take the True branch),766,767,768,794,795,796,(797,write of variable `mainRes'),(798,take the True branch),(799,take the False branch),(859,deref of variable `mainRes')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mainRes' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="503">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="802" path="chrome-5.0.375.70/third_party/icu/source/common/uresdata.c">
   <explanation>
   function or method: ures_swapResource
   line-by-line trace: 706,707,708,(710,take the False branch),(710,take the False branch),716,717,718,720,743,744,746,747,749,750,752,753,(755,take the True branch),757,758,759,(761,write of variable `pKey32'),764,766,(781,take the False branch),785,786,(789,take the True branch),798,804,798,803,799,(800,take the False branch),(802,deref of variable `pKey32')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pKey32' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="504">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2025" path="chrome-5.0.375.70/third_party/icu/source/common/utext.cpp">
   <explanation>
   function or method: utext_openReplaceable_4_2
   line-by-line trace: (2016,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(2016,take the False branch),(2019,take the False branch),(2023,write of variable `ut'),(2025,deref of variable `ut')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ut' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="505">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2734" path="chrome-5.0.375.70/third_party/icu/source/common/utext.cpp">
   <explanation>
   function or method: charIterTextClone
   line-by-line trace: (2718,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(2718,take the False branch),(2722,take the False branch),2727,2728,(2729,write of variable `dest'),2732,2733,(2734,deref of variable `dest')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `dest' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="506">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="640" path="chrome-5.0.375.70/third_party/icu/source/common/utrie2.c">
   <explanation>
   function or method: enumEitherTrie
   line-by-line trace: 511,512,514,515,516,(518,take the False branch),(521,take the True branch),522,(525,take the False branch),(534,write of variable `idx'),535,537,538,541,544,547,548,549,550,(553,take the True branch),(553,take the True branch),555,675,657,675,555,(556,take the True branch),557,(559,take the False branch),(579,take the False branch),583,657,583,(585,take the True branch),675,657,675,(585,take the False branch),595,(596,take the False branch),609,610,678,657,666,678,681,610,611,657,611,657,(611,take the True branch),612,678,657,666,678,681,612,(616,take the True branch),(617,take the False branch),620,(622,take the True branch),684,(622,take the False branch),627,(628,take the False branch),639,684,(639,take the True branch),(640,take the False branch),(640,deref of variable `idx')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `idx' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="507">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="734" path="chrome-5.0.375.70/third_party/icu/source/i18n/bmsearch.cpp">
   <explanation>
   function or method: icu_4_2::BoyerMooreSearch::search
   line-by-line trace: 707,708,709,710,711,(713,take the False branch),(719,take the True branch),720,721,722,(724,take the True branch),728,730,732,(733,write of variable `cei'),(734,deref of variable `cei')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cei' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="508">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="764" path="chrome-5.0.375.70/third_party/icu/source/i18n/bmsearch.cpp">
   <explanation>
   function or method: icu_4_2::BoyerMooreSearch::search
   line-by-line trace: 707,708,709,710,711,(713,take the False branch),(719,take the True branch),720,721,722,(724,take the True branch),728,730,732,733,734,735,(737,take the False branch),(737,take the True branch),(737,take the True branch),(738,take the False branch),748,756,(759,take the True branch),760,(761,write of variable `tcei'),(764,deref of variable `tcei')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tcei' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="509">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="896" path="chrome-5.0.375.70/third_party/icu/source/i18n/colldata.cpp">
   <explanation>
   function or method: icu_4_2::CollData::minLengthInChars
   line-by-line trace: (869,take the False branch),873,874,875,876,(878,take the True branch),879,(881,take the True branch),882,886,(887,user_error_fun of function `_ZN7icu_4_26CEListC1EP9UCollatorRKNS_13UnicodeStringER10UErrorCode'),(887,write of variable `ceList2'),(889,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(889,take the True branch),890,(891,write of variable `ceList2'),(895,take the True branch),(896,deref of variable `ceList2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ceList2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="510">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1025" path="chrome-5.0.375.70/third_party/icu/source/i18n/colldata.cpp">
   <explanation>
   function or method: icu_4_2::CollData::open
   line-by-line trace: (1019,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1019,take the False branch),(1023,write of variable `cache'),(1025,deref of variable `cache')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cache' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="511">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1032" path="chrome-5.0.375.70/third_party/icu/source/i18n/colldata.cpp">
   <explanation>
   function or method: icu_4_2::CollData::close
   line-by-line trace: (1030,write of variable `cache'),(1032,deref of variable `cache')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cache' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="512">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1198" path="chrome-5.0.375.70/third_party/icu/source/i18n/dtptngen.cpp">
   <explanation>
   function or method: icu_4_2::DateTimePatternGenerator::getRedundants
   line-by-line trace: 1192,1193,1194,(1195,take the True branch),1196,(1197,write of variable `pattern'),(1198,deref of variable `pattern')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pattern' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="513">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="395" path="chrome-5.0.375.70/third_party/icu/source/i18n/repattrn.cpp">
   <explanation>
   function or method: icu_4_2::RegexPattern::matches
   line-by-line trace: (388,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(388,take the False branch),390,(391,write of variable `pat'),392,(394,user_error_fun of function `_ZN7icu_4_212RegexPattern7compileERKNS_13UnicodeStringEjR11UParseErrorR10UErrorCode'),(394,write of variable `pat'),(395,deref of variable `pat')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pat' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="514">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="327" path="chrome-5.0.375.70/third_party/icu/source/i18n/tmutfmt.cpp">
   <explanation>
   function or method: icu_4_2::TimeUnitFormat::parseObject
   line-by-line trace: 240,241,242,243,244,245,(246,write of variable `countOfLongestMatch'),254,(255,take the False branch),(325,take the True branch),(325,take the True branch),(327,deref of variable `countOfLongestMatch')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `countOfLongestMatch' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="515">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="194" path="chrome-5.0.375.70/third_party/icu/source/i18n/tridpars.cpp">
   <explanation>
   function or method: icu_4_2::TransliteratorIDParser::parseSingleID
   line-by-line trace: 110,(114,write of variable `specsA'),115,116,(120,take the False branch),139,144,(145,take the False branch),(181,take the True branch),182,(190,take the False branch),(194,deref of variable `specsA')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `specsA' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="516">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2416" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: getDiscontiguous
   line-by-line trace: 2381,2382,2383,2384,2385,2386,(2387,write of variable `tempbufferpos'),2388,2390,2393,2394,2395,2396,2397,2398,2399,2408,2402,(2401,take the False branch),(2402,take the True branch),2407,2406,2405,(2404,take the False branch),(2405,take the False branch),(2406,take the False branch),(2407,take the False branch),(2408,take the False branch),(2412,take the True branch),(2415,take the True branch),(2416,deref of variable `tempbufferpos')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tempbufferpos' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="517">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="582" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucoleitr.cpp">
   <explanation>
   function or method: ucol_previousProcessed_4_2
   line-by-line trace: 524,525,530,(532,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(532,take the False branch),(536,take the True branch),(537,take the True branch),(538,take the True branch),539,540,539,541,544,545,(548,take the False branch),554,(556,take the True branch),558,559,562,563,564,565,(567,take the False branch),575,(576,take the False branch),(579,take the True branch),(580,write of variable `rcei'),(582,deref of variable `rcei')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rcei' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="518">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="607" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucoleitr.cpp">
   <explanation>
   function or method: ucol_previousProcessed_4_2
   line-by-line trace: 524,525,530,(532,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(532,take the False branch),(536,take the True branch),(537,take the True branch),(538,take the True branch),539,540,539,541,544,545,(548,take the False branch),554,(556,take the False branch),590,(591,take the False branch),(604,write of variable `pcei'),(606,take the True branch),(607,deref of variable `pcei')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pcei' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="519">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1365" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucurr.cpp">
   <explanation>
   function or method: uprv_parseCurrency_4_2
   line-by-line trace: (1249,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1249,take the False branch),1253,(1254,write of variable `currencyNames'),1255,1256,1257,1259,1262,(1263,take the False branch),1267,(1270,take the False branch),1278,(1279,take the False branch),1332,1334,1335,(1336,take the True branch),1337,1338,1339,1341,1342,1344,1345,1344,1351,1352,(1353,take the True branch),1355,1357,1355,(1364,take the True branch),(1364,take the True branch),(1365,deref of variable `currencyNames')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `currencyNames' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="520">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1368" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucurr.cpp">
   <explanation>
   function or method: uprv_parseCurrency_4_2
   line-by-line trace: (1249,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1249,take the False branch),1253,1254,1255,(1256,write of variable `currencySymbols'),1257,1259,1262,(1263,take the False branch),1267,(1270,take the False branch),1278,(1279,take the False branch),1332,1334,1335,(1336,take the True branch),1337,1338,1339,1341,1342,1344,1345,1344,1351,1352,(1353,take the True branch),1355,1357,1355,(1364,take the False branch),(1367,take the True branch),(1367,take the True branch),(1368,deref of variable `currencySymbols')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `currencySymbols' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="521">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1374" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucurr.cpp">
   <explanation>
   function or method: uprv_parseCurrency_4_2
   line-by-line trace: (1249,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1249,take the False branch),1253,1254,1255,1256,(1257,write of variable `cacheEntry'),1259,1262,(1263,take the False branch),1267,(1270,take the False branch),1278,(1279,take the False branch),1332,1334,1335,(1336,take the True branch),1337,1338,1339,1341,1342,1344,1345,1344,1351,1352,(1353,take the True branch),1355,1357,1355,(1364,take the False branch),(1367,take the True branch),(1367,take the True branch),1368,1369,1373,(1374,deref of variable `cacheEntry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cacheEntry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="522">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="441" path="chrome-5.0.375.70/third_party/icu/source/i18n/udat.cpp">
   <explanation>
   function or method: udat_getSymbols_4_2
   line-by-line trace: (341,user_error_fun of function `_Z24verifyIsSimpleDateFormatPKPvP10UErrorCode'),(342,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(342,take the False branch),344,345,344,346,(347,write of variable `res'),349,436,(440,take the True branch),(441,deref of variable `res')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `res' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="523">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3796" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_search_4_2
   line-by-line trace: (3736,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3736,take the False branch),3757,3756,(3755,take the False branch),(3756,take the False branch),(3757,take the False branch),(3758,take the False branch),(3763,take the True branch),(3764,user_error_fun of function `_Z25initializePatternPCETableP13UStringSearchP10UErrorCode'),3767,(3768,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3771,3772,3773,3774,3776,3777,3778,3779,3785,3787,(3790,take the True branch),3791,(3792,write of variable `targetCEI'),(3796,deref of variable `targetCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `targetCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="524">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3822" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_search_4_2
   line-by-line trace: (3736,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3736,take the False branch),3757,3756,(3755,take the False branch),(3756,take the False branch),(3757,take the False branch),(3758,take the False branch),(3763,take the True branch),(3764,user_error_fun of function `_Z25initializePatternPCETableP13UStringSearchP10UErrorCode'),3767,(3768,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3771,3772,3773,3774,3776,3777,3778,3779,3785,3787,(3790,take the False branch),3798,(3802,take the True branch),(3802,take the False branch),(3807,take the False branch),(3818,write of variable `firstCEI'),3819,3820,(3822,deref of variable `firstCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `firstCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="525">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3823" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_search_4_2
   line-by-line trace: (3736,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3736,take the False branch),3757,3756,(3755,take the False branch),(3756,take the False branch),(3757,take the False branch),(3758,take the False branch),(3763,take the True branch),(3764,user_error_fun of function `_Z25initializePatternPCETableP13UStringSearchP10UErrorCode'),3767,(3768,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3771,3772,3773,3774,3776,3777,3778,3779,3785,3787,(3790,take the False branch),3798,(3802,take the True branch),(3802,take the False branch),(3807,take the False branch),3818,(3819,write of variable `lastCEI'),3820,3822,(3823,deref of variable `lastCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lastCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="526">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3824" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_search_4_2
   line-by-line trace: (3736,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3736,take the False branch),3757,3756,(3755,take the False branch),(3756,take the False branch),(3757,take the False branch),(3758,take the False branch),(3763,take the True branch),(3764,user_error_fun of function `_Z25initializePatternPCETableP13UStringSearchP10UErrorCode'),3767,(3768,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3771,3772,3773,3774,3776,3777,3778,3779,3785,3787,(3790,take the False branch),3798,(3802,take the True branch),(3802,take the False branch),(3807,take the False branch),3818,3819,(3820,write of variable `nextCEI'),3822,3823,(3824,deref of variable `nextCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `nextCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="527">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4016" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_searchBackwards_4_2
   line-by-line trace: (3931,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3931,take the False branch),3952,3951,(3950,take the False branch),(3951,take the False branch),(3952,take the False branch),(3953,take the False branch),(3958,take the False branch),(3962,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3963,(3974,take the True branch),3975,3976,3978,3980,(3981,take the True branch),3982,3990,3991,3992,3994,3995,3996,3997,3998,4004,4006,(4009,take the True branch),4010,(4012,write of variable `targetCEI'),(4016,deref of variable `targetCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `targetCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="528">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4042" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_searchBackwards_4_2
   line-by-line trace: (3931,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3931,take the False branch),3952,3951,(3950,take the False branch),(3951,take the False branch),(3952,take the False branch),(3953,take the False branch),(3958,take the False branch),(3962,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3963,(3974,take the True branch),3975,3976,3978,3980,(3981,take the True branch),3982,3990,3991,3992,3994,3995,3996,3997,3998,4004,4006,(4009,take the False branch),4018,(4022,take the False branch),(4027,take the False branch),(4038,write of variable `firstCEI'),4039,(4040,take the True branch),(4042,deref of variable `firstCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `firstCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="529">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4043" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_searchBackwards_4_2
   line-by-line trace: (3931,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(3931,take the False branch),3952,3951,(3950,take the False branch),(3951,take the False branch),(3952,take the False branch),(3953,take the False branch),(3958,take the False branch),(3962,user_error_fun of function `_ZN7icu_4_28CEBufferC1EP13UStringSearchP10UErrorCode'),3963,(3974,take the True branch),3975,3976,3978,3980,(3981,take the True branch),3982,3990,3991,3992,3994,3995,3996,3997,3998,4004,4006,(4009,take the False branch),4018,(4022,take the False branch),(4027,take the False branch),4038,(4039,write of variable `lastCEI'),(4040,take the True branch),4042,(4043,deref of variable `lastCEI')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lastCEI' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="530">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="247" path="chrome-5.0.375.70/third_party/icu/source/i18n/zstrfmt.cpp">
   <explanation>
   function or method: icu_4_2::TextTrieMap::put
   line-by-line trace: (222,take the False branch),229,230,231,(232,take the False branch),238,239,(242,write of variable `node'),243,(244,take the True branch),(245,write of variable `node'),(244,take the False branch),(247,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="531">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1666" path="chrome-5.0.375.70/third_party/icu/source/i18n/zstrfmt.cpp">
   <explanation>
   function or method: icu_4_2::ZSFCache::get
   line-by-line trace: 1649,1652,1653,1655,1656,(1657,write of variable `prev'),(1658,take the True branch),1659,(1660,take the True branch),1662,(1665,take the True branch),(1666,deref of variable `prev')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prev' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="532">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="179" path="chrome-5.0.375.70/third_party/libevent/event.c">
   <explanation>
   function or method: event_base_new
   line-by-line trace: 172,173,(175,write of variable `base'),(175,take the True branch),176,178,(179,deref of variable `base')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `base' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="533">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="124" path="chrome-5.0.375.70/third_party/libevent/evrpc.c">
   <explanation>
   function or method: evrpc_add_hook
   line-by-line trace: 105,(106,write of variable `head'),107,108,115,(116,take the True branch),119,(120,take the True branch),122,123,(124,deref of variable `head')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `head' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="534">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="202" path="chrome-5.0.375.70/third_party/libevent/evrpc.c">
   <explanation>
   function or method: evrpc_construct_uri
   line-by-line trace: 193,194,196,(197,write of variable `constructed_uri'),(197,take the True branch),198,200,201,(202,deref of variable `constructed_uri')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `constructed_uri' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="535">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="295" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_htmlescape
   line-by-line trace: 278,279,280,(282,take the False branch),(285,write of variable `p'),(286,take the False branch),(288,take the False branch),(295,deref of variable `p')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `p' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="536">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2328" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_new
   line-by-line trace: (2326,write of variable `http'),(2328,deref of variable `http')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `http' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="537">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2398" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_set_cb
   line-by-line trace: 2393,(2395,write of variable `http_cb'),(2395,take the True branch),2396,(2398,deref of variable `http_cb')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `http_cb' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="538">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="117" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/diskcache.cc">
   <explanation>
   function or method: talk_base::DiskCache::LockResource
   line-by-line trace: (116,write of variable `entry'),(117,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="539">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="131" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/diskcache.cc">
   <explanation>
   function or method: talk_base::DiskCache::WriteResource
   line-by-line trace: (130,write of variable `entry'),(131,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="540">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="159" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/diskcache.cc">
   <explanation>
   function or method: talk_base::DiskCache::UnlockResource
   line-by-line trace: (158,write of variable `entry'),(159,deref of variable `entry')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="541">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="349" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/diskcache.cc">
   <explanation>
   function or method: talk_base::DiskCache::ReleaseResource
   line-by-line trace: 330,(331,take the False branch),337,338,(340,take the True branch),343,(344,write of variable `entry2'),346,347,348,(349,deref of variable `entry2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entry2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="542">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="952" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/physicalsocketserver.cc">
   <explanation>
   function or method: talk_base::PhysicalSocketServer::Wait
   line-by-line trace: (851,write of variable `ptvWait'),852,853,(854,take the False branch),873,(874,take the False branch),875,(876,take the False branch),878,(880,take the True branch),881,883,(884,take the False branch),906,(909,take the False branch),(914,take the False branch),920,(921,take the False branch),(951,take the True branch),(952,deref of variable `ptvWait')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ptvWait' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="543">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1132" path="chrome-5.0.375.70/third_party/libxml/SAX2.c">
   <explanation>
   function or method: xmlSAX2AttributeInternal
   line-by-line trace: 1055,1056,1057,1058,1059,1060,(1062,take the True branch),1063,1064,1065,(1088,take the False branch),1101,1102,1103,1102,(1105,take the True branch),1106,(1108,take the False branch),1119,1118,(1117,take the True branch),(1117,take the True branch),(1118,take the True branch),(1118,take the True branch),(1118,take the True branch),(1119,take the True branch),(1119,take the True branch),(1119,take the True branch),1120,1121,(1123,take the True branch),1124,(1125,write of variable `val'),1127,(1132,deref of variable `val')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `val' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="544">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2354" path="chrome-5.0.375.70/third_party/libxml/catalog.c">
   <explanation>
   function or method: xmlParseSGMLCatalog
   line-by-line trace: (2326,write of variable `cur'),2327,2328,(2330,take the False branch),(2330,cmp_nonnull of variable `cur'),(2330,take the False branch),2332,(2334,take the True branch),(2334,deref of variable `cur'),(2334,take the True branch),(2335,deref of variable `cur'),(2335,take the False branch),(2335,deref of variable `cur'),(2335,take the True branch),(2335,deref of variable `cur'),(2335,take the False branch),(2335,deref of variable `cur'),(2335,take the False branch),(2336,deref of variable `cur'),(2336,take the False branch),(2338,deref of variable `cur'),(2338,take the True branch),(2338,deref of variable `cur'),(2338,take the False branch),2345,2346,2347,(2349,write of variable `cur'),(2350,take the False branch),(2354,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="545">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="969" path="chrome-5.0.375.70/third_party/libxml/hash.c">
   <explanation>
   function or method: xmlHashCopy
   line-by-line trace: 945,946,947,948,(950,take the False branch),(952,take the False branch),(955,write of variable `ret'),(956,take the False branch),(969,deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="546">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="147" path="chrome-5.0.375.70/third_party/libxml/list.c">
   <explanation>
   function or method: xmlListLinkSearch
   line-by-line trace: 140,(141,take the False branch),(143,write of variable `lk'),(144,take the False branch),(147,deref of variable `lk')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lk' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="547">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="172" path="chrome-5.0.375.70/third_party/libxml/list.c">
   <explanation>
   function or method: xmlListLinkReverseSearch
   line-by-line trace: 165,(166,take the False branch),(168,write of variable `lk'),(169,take the False branch),(172,deref of variable `lk')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lk' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="548">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="288" path="chrome-5.0.375.70/third_party/libxml/list.c">
   <explanation>
   function or method: xmlListInsert
   line-by-line trace: 275,(277,take the False branch),(279,write of variable `lkPlace'),281,(282,take the False branch),287,(288,deref of variable `lkPlace')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lkPlace' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="549">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="320" path="chrome-5.0.375.70/third_party/libxml/list.c">
   <explanation>
   function or method: xmlListAppend
   line-by-line trace: 307,(309,take the False branch),(311,write of variable `lkPlace'),313,(314,take the False branch),319,(320,deref of variable `lkPlace')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lkPlace' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="550">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5306" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseElementMixedContentDecl
   line-by-line trace: (5245,write of variable `cur'),5246,(5248,take the True branch),(5248,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5250,take the False branch),(5250,take the True branch),(5250,take the True branch),5251,(5252,take the True branch),(5252,take the False branch),(5253,take the False branch),(5269,take the False branch),(5269,take the False branch),(5273,take the False branch),(5304,take the True branch),(5304,take the True branch),(5305,take the True branch),(5306,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="551">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5311" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseElementMixedContentDecl
   line-by-line trace: (5245,write of variable `ret'),5246,(5248,take the True branch),(5248,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5249,take the True branch),(5250,take the False branch),(5250,take the True branch),(5250,take the True branch),5251,(5252,take the True branch),(5252,take the False branch),(5253,take the False branch),(5269,take the False branch),(5269,take the False branch),(5273,take the False branch),(5304,take the True branch),(5304,take the True branch),(5305,take the True branch),5306,(5308,take the True branch),5309,(5311,deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="552">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8295" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseStartTag2
   line-by-line trace: 8219,8220,8221,8222,8223,8224,8225,8226,8227,8228,8229,8230,8231,(8233,take the False branch),(8234,take the True branch),8243,(8244,take the True branch),(8244,take the True branch),(8244,take the True branch),8245,8246,8247,8248,8249,8250,8251,8252,8253,8255,8257,(8258,take the False branch),8263,8270,(8271,take the True branch),(8271,take the True branch),(8272,take the False branch),8274,8275,(8274,take the True branch),(8275,take the False branch),(8275,take the True branch),(8276,take the True branch),(8276,take the False branch),(8276,take the False branch),(8276,take the True branch),8277,8278,8279,8281,8282,8281,(8283,take the False branch),(8289,take the True branch),(8289,take the True branch),(8290,take the True branch),(8291,take the True branch),(8291,take the True branch),(8292,write of variable `URL'),8293,(8295,deref of variable `URL')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `URL' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="553">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5425" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGParsePatterns
   line-by-line trace: (5413,write of variable `def'),5415,(5416,take the True branch),(5417,take the True branch),(5417,take the True branch),(5417,take the True branch),(5417,take the True branch),5418,(5419,take the False branch),(5421,cmp_nonnull of variable `def'),(5422,take the True branch),(5422,deref of variable `def'),(5422,take the True branch),(5423,take the True branch),(5424,write of variable `def'),(5425,deref of variable `def')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `def' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="554">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5428" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGParsePatterns
   line-by-line trace: (5413,write of variable `last'),5415,(5416,take the True branch),(5417,take the True branch),(5417,take the True branch),(5417,take the True branch),(5417,take the True branch),5418,(5419,take the False branch),(5422,take the True branch),(5422,take the False branch),(5428,deref of variable `last')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `last' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="555">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5431" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGParsePatterns
   line-by-line trace: 5413,5415,(5416,take the True branch),(5417,take the True branch),(5417,take the True branch),(5417,take the True branch),(5417,take the True branch),(5418,write of variable `cur'),(5419,take the True branch),5420,(5431,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="556">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="6541" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGParseDocument
   line-by-line trace: 6516,6517,6518,(6520,take the False branch),(6520,take the False branch),6523,(6524,take the False branch),6527,6528,(6529,take the True branch),(6529,take the True branch),(6529,take the False branch),6532,(6534,write of variable `ret'),(6535,take the False branch),(6541,deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="557">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="10570" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGValidateDocument
   line-by-line trace: 10551,10552,10553,10554,10555,(10557,take the False branch),(10557,take the False branch),(10557,take the False branch),10560,10561,10562,(10563,take the False branch),(10567,write of variable `state'),10568,10569,(10570,take the True branch),(10570,deref of variable `state')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `state' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="558">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4018" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlStaticCopyNodeList
   line-by-line trace: 3990,(3991,write of variable `p'),(3993,take the True branch),(3995,take the False branch),4012,(4013,take the False branch),(4016,take the True branch),(4018,deref of variable `p')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `p' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="559">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4019" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlStaticCopyNodeList
   line-by-line trace: 3990,3991,(3993,take the True branch),(3995,take the False branch),(4012,write of variable `q'),(4013,take the False branch),(4016,take the True branch),4018,(4019,deref of variable `q')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `q' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="560">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5958" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlReconciliateNs
   line-by-line trace: 5889,(5890,write of variable `newNs'),5891,5892,5894,5895,5896,5897,(5899,take the False branch),(5899,take the False branch),(5900,take the False branch),(5900,take the False branch),(5901,take the False branch),(5902,take the True branch),(5906,take the True branch),(5910,take the False branch),(5926,take the False branch),5929,(5932,take the True branch),5936,(5937,take the True branch),(5941,take the False branch),(5958,deref of variable `newNs')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `newNs' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="561">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5959" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlReconciliateNs
   line-by-line trace: (5889,write of variable `oldNs'),5890,5891,5892,5894,5895,5896,5897,(5899,take the False branch),(5899,take the False branch),(5900,take the False branch),(5900,take the False branch),(5901,take the False branch),(5902,take the True branch),(5906,take the True branch),(5910,take the False branch),(5926,take the False branch),5929,(5932,take the True branch),5936,(5937,take the True branch),(5941,take the False branch),5958,(5959,deref of variable `oldNs')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `oldNs' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="562">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8919" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlDOMWrapCloneNode
   line-by-line trace: 8822,8823,8824,8825,8826,8827,8830,8836,(8837,write of variable `parentClone'),8838,8839,(8841,take the False branch),(8841,take the False branch),(8841,take the False branch),(8846,take the False branch),(8851,take the True branch),(8851,take the True branch),(8852,take the False branch),(8858,take the True branch),8859,(8860,take the False branch),8863,(8867,take the True branch),8868,8870,8872,(8873,take the True branch),(8874,take the False branch),8885,8900,8904,(8905,take the False branch),8909,(8913,take the True branch),8914,(8915,take the False branch),(8919,deref of variable `parentClone')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `parentClone' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="563">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2036" path="chrome-5.0.375.70/third_party/libxml/uri.c">
   <explanation>
   function or method: xmlBuildURI
   line-by-line trace: 1924,1925,1926,(1927,write of variable `bas'),1928,(1938,take the True branch),1939,(1950,take the False branch),(1952,take the True branch),(1952,take the False branch),(1959,take the True branch),1960,(1967,take the False branch),(1972,take the False branch),1996,(1997,take the False branch),(1999,take the True branch),(1999,take the True branch),(2000,take the False branch),(2032,take the False branch),(2036,deref of variable `bas')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `bas' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="564">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1799" path="chrome-5.0.375.70/third_party/libxml/valid.c">
   <explanation>
   function or method: xmlCopyEnumeration
   line-by-line trace: 1794,(1796,take the False branch),(1797,write of variable `ret'),(1799,take the True branch),(1799,deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="565">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="850" path="chrome-5.0.375.70/third_party/libxml/xinclude.c">
   <explanation>
   function or method: xmlXIncludeCopyNodeList
   line-by-line trace: (838,write of variable `last'),(840,take the False branch),(840,take the False branch),(840,take the False branch),(841,take the False branch),843,(844,take the True branch),845,(846,take the True branch),(847,take the False branch),(850,deref of variable `last')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `last' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="566">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="945" path="chrome-5.0.375.70/third_party/libxml/xinclude.c">
   <explanation>
   function or method: xmlXIncludeCopyRange
   line-by-line trace: (904,write of variable `listParent'),905,907,908,909,(911,take the False branch),(911,take the False branch),(911,take the False branch),(912,take the False branch),(914,take the False branch),916,(918,take the False branch),920,(921,take the False branch),924,925,926,(935,take the True branch),(939,take the True branch),(940,take the True branch),942,943,944,(945,deref of variable `listParent')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `listParent' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="567">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="955" path="chrome-5.0.375.70/third_party/libxml/xinclude.c">
   <explanation>
   function or method: xmlXIncludeCopyRange
   line-by-line trace: (904,write of variable `last'),905,907,908,909,(911,take the False branch),(911,take the False branch),(911,take the False branch),(912,take the False branch),(914,take the False branch),916,(918,take the False branch),920,(921,take the False branch),924,925,926,(935,take the True branch),(939,take the False branch),(954,take the True branch),(955,deref of variable `last')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `last' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="568">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1885" path="chrome-5.0.375.70/third_party/libxml/xinclude.c">
   <explanation>
   function or method: xmlXIncludeLoadTxt
   line-by-line trace: 1784,1785,1786,1787,1788,1789,1790,1795,(1796,take the False branch),(1801,take the False branch),1808,1809,(1810,take the False branch),(1820,take the False branch),(1831,take the False branch),(1840,take the True branch),(1840,take the True branch),1841,(1843,take the False branch),1865,(1866,take the False branch),1870,(1875,take the True branch),1876,1877,(1879,write of variable `content'),1880,(1881,take the True branch),1882,1883,(1885,deref of variable `content')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `content' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="569">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1112" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderValidateEntity
   line-by-line trace: 1036,(1037,write of variable `node'),1038,1040,(1041,deref of variable `node'),(1041,take the True branch),(1046,deref of variable `node'),(1046,take the True branch),(1046,take the True branch),(1047,take the False branch),1053,(1052,deref of variable `node'),(1052,take the False branch),(1062,take the False branch),(1064,deref of variable `node'),(1064,write of variable `node'),(1080,deref of variable `node'),(1080,take the False branch),(1083,deref of variable `node'),(1083,take the True branch),1084,(1086,deref of variable `node'),(1086,take the False branch),1090,(1091,deref of variable `node'),(1091,write of variable `node'),(1092,deref of variable `node'),(1092,take the True branch),1093,(1094,take the True branch),(1095,deref of variable `node'),(1095,take the True branch),(1096,take the False branch),1100,1103,1104,1107,(1106,deref of variable `node'),(1106,take the True branch),(1107,take the True branch),(1107,take the True branch),(1108,write of variable `node'),(1110,take the False branch),(1112,deref of variable `node')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `node' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="570">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1423" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderRead
   line-by-line trace: 1234,1235,(1236,write of variable `oldnode'),(1239,take the False branch),1241,(1242,take the False branch),(1244,take the False branch),(1246,take the False branch),(1253,take the True branch),1254,1258,1259,(1260,take the False branch),(1265,take the True branch),(1266,take the True branch),(1267,take the False branch),(1268,take the False branch),(1279,take the True branch),1280,(1282,take the True branch),1283,1284,1286,1287,1288,1446,1453,(1452,take the True branch),(1453,take the True branch),(1454,take the False branch),(1455,take the True branch),(1456,take the False branch),1466,1465,(1464,take the True branch),(1464,take the True branch),(1465,take the True branch),(1466,take the True branch),(1467,take the False branch),1468,(1467,take the False branch),(1481,take the True branch),(1481,take the True branch),1482,1483,1294,(1295,take the False branch),1307,1320,1317,1308,(1307,take the True branch),(1307,take the False branch),(1331,take the True branch),1334,1333,(1332,take the True branch),(1333,take the True branch),(1334,take the False branch),(1342,take the False branch),1387,1386,(1385,take the True branch),(1386,take the True branch),(1387,take the True branch),(1388,take the False branch),(1393,take the True branch),(1393,take the True branch),1394,(1396,take the False branch),1399,1403,1401,(1400,take the False branch),(1401,take the False branch),(1403,take the False branch),(1405,take the True branch),(1406,take the True branch),1407,1408,(1409,take the False branch),1412,1413,1424,1423,1422,1420,(1418,take the True branch),(1420,take the True branch),(1422,take the True branch),(1423,deref of variable `oldnode')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `oldnode' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="571">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1672" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderReadInnerXml
   line-by-line trace: 1652,1653,1654,1655,(1657,take the False branch),1660,1661,(1662,take the True branch),1664,(1665,write of variable `buff2'),(1666,take the False branch),(1672,deref of variable `buff2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `buff2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="572">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1676" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderReadInnerXml
   line-by-line trace: 1652,1653,1654,1655,(1657,take the False branch),1660,(1661,write of variable `buff'),(1662,take the False branch),(1676,deref of variable `buff')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `buff' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="573">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1716" path="chrome-5.0.375.70/third_party/libxml/xmlreader.c">
   <explanation>
   function or method: xmlTextReaderReadOuterXml
   line-by-line trace: 1698,1699,1700,1701,1703,1704,(1705,take the False branch),1708,(1709,write of variable `buff'),(1710,take the False branch),(1716,deref of variable `buff')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `buff' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="574">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5524" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlRegexpIsDeterminist
   line-by-line trace: 5515,5516,(5518,take the False branch),(5520,take the False branch),(5523,write of variable `am'),(5524,deref of variable `am')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `am' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="575">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="6801" path="chrome-5.0.375.70/third_party/libxml/xmlschemas.c">
   <explanation>
   function or method: xmlSchemaParseWildcardNs
   line-by-line trace: 6709,6710,6711,(6712,write of variable `lastNs'),6713,6715,6717,(6716,take the False branch),(6717,take the True branch),6718,6735,6736,(6737,take the False branch),(6737,take the False branch),(6739,take the False branch),6746,6748,6749,(6750,take the False branch),(6750,take the True branch),(6750,take the False branch),(6750,take the False branch),6752,(6753,take the False branch),(6755,take the False branch),6757,(6758,take the False branch),(6758,take the False branch),(6769,take the True branch),6770,6784,(6785,take the True branch),(6786,take the True branch),6787,6788,(6790,take the True branch),6791,(6792,take the False branch),6796,6797,(6798,take the False branch),(6801,deref of variable `lastNs')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lastNs' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="576">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="7448" path="chrome-5.0.375.70/third_party/libxml/xmlschemas.c">
   <explanation>
   function or method: xmlSchemaParseLocalAttribute
   line-by-line trace: 7087,(7088,write of variable `use'),7089,7090,7091,7092,7093,(7102,take the False branch),(7102,take the False branch),(7102,take the False branch),7104,(7105,take the False branch),7114,7118,(7119,take the False branch),(7219,take the False branch),(7232,take the False branch),(7234,take the True branch),7235,(7238,take the True branch),(7238,take the True branch),7239,(7244,take the True branch),7245,7251,(7252,take the False branch),(7258,take the False branch),(7265,take the False branch),(7274,take the True branch),7275,7337,7341,(7342,take the False branch),(7421,take the True branch),(7421,take the True branch),(7421,take the False branch),(7428,take the False branch),(7447,take the True branch),(7447,take the True branch),(7447,take the True branch),(7447,take the True branch),(7448,deref of variable `use')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `use' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="577">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3697" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCopyValue
   line-by-line trace: 3655,(3660,take the True branch),3661,3694,(3695,write of variable `cur'),(3696,take the True branch),(3697,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="578">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3712" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCopyValue
   line-by-line trace: (3655,write of variable `prev'),(3660,take the True branch),3661,3694,3695,(3696,take the False branch),3698,3707,(3709,take the False branch),(3712,deref of variable `prev')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prev' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="579">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4005" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the True branch),(3982,take the True branch),3983,3984,3986,3988,(3989,take the False branch),(3993,take the True branch),3994,3996,(3997,take the False branch),4002,(4004,write of variable `q2'),(4005,deref of variable `q2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `q2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="580">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4050" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the False branch),(4026,take the True branch),4027,4028,4031,4032,(4034,take the False branch),(4038,take the True branch),4039,4041,(4042,take the False branch),4047,(4049,write of variable `p2'),(4050,deref of variable `p2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `p2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="581">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4079" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the True branch),(3982,take the False branch),(4076,take the True branch),4077,(4078,write of variable `q1'),(4079,deref of variable `q1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `q1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="582">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4082" path="chrome-5.0.375.70/third_party/libxml/xmlschemastypes.c">
   <explanation>
   function or method: xmlSchemaCompareDates
   line-by-line trace: 3973,3974,3975,(3977,take the False branch),(3977,take the False branch),(3980,take the True branch),(3982,take the False branch),(4076,take the True branch),4077,4078,4079,(4081,write of variable `p1'),(4082,deref of variable `p1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `p1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="583">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2560" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathPopNodeSet
   line-by-line trace: 2547,2548,(2550,take the False branch),(2551,take the False branch),(2555,take the False branch),(2555,take the False branch),(2559,write of variable `obj'),(2560,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="584">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2594" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathPopExternal
   line-by-line trace: 2582,2583,(2585,take the False branch),(2585,take the False branch),(2589,take the False branch),(2593,write of variable `obj'),(2594,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="585">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2870" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCmpNodes
   line-by-line trace: 2844,2845,(2846,write of variable `attrNode2'),2847,(2849,take the False branch),(2849,take the False branch),(2854,take the False branch),(2856,take the False branch),(2861,take the False branch),(2866,take the True branch),(2867,take the True branch),(2869,take the True branch),(2870,deref of variable `attrNode2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `attrNode2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="586">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3131" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCmpNodesExt
   line-by-line trace: 2993,2994,(2995,write of variable `miscNode2'),2996,2997,(2999,take the False branch),(2999,take the False branch),(3002,take the False branch),3008,3076,3077,3079,3080,3081,3122,(3124,take the True branch),(3125,take the True branch),(3126,take the True branch),(3131,deref of variable `miscNode2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `miscNode2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="587">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="6683" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathEqualNodeSetFloat
   line-by-line trace: 6664,6665,6666,6667,6668,(6670,take the False branch),(6671,take the True branch),(6671,take the False branch),6674,(6675,take the True branch),(6676,take the True branch),6677,(6678,take the True branch),6679,6680,6681,(6682,write of variable `val'),(6683,deref of variable `val')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `val' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="588">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="6895" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathEqualValuesCommon
   line-by-line trace: 6825,6830,6875,(6876,deref of variable `arg2'),6887,6888,6889,(6890,write of variable `arg2'),6892,(6894,take the False branch),(6895,deref of variable `arg2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="589">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="6955" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathEqualValuesCommon
   line-by-line trace: 6825,(6830,deref of variable `arg1'),6932,6933,6950,6951,6952,(6953,write of variable `arg1'),(6955,deref of variable `arg1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="590">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="7245" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompareValues
   line-by-line trace: 7204,7205,(7207,take the False branch),(7207,take the False branch),7208,(7209,write of variable `arg1'),(7210,take the False branch),(7210,cmp_nonnull of variable `arg1'),(7210,take the False branch),7219,(7218,take the False branch),(7218,take the False branch),(7219,deref of variable `arg1'),(7219,take the False branch),(7219,deref of variable `arg1'),(7219,take the False branch),(7240,deref of variable `arg1'),(7240,take the True branch),7241,7242,(7243,write of variable `arg1'),(7245,deref of variable `arg1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="591">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="7255" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompareValues
   line-by-line trace: 7204,7205,(7207,take the False branch),(7207,take the False branch),(7208,write of variable `arg2'),7209,(7210,take the False branch),(7210,take the False branch),7219,(7218,deref of variable `arg2'),(7218,take the False branch),(7218,deref of variable `arg2'),(7218,take the False branch),(7219,take the False branch),(7219,take the False branch),(7240,take the True branch),7241,7242,7243,(7245,take the False branch),(7250,deref of variable `arg2'),(7250,take the True branch),7251,7252,(7253,write of variable `arg2'),(7255,deref of variable `arg2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="592">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8581" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathLocalNameFunction
   line-by-line trace: 8564,(8566,take the False branch),(8568,take the True branch),8569,8570,8569,8571,(8574,take the False branch),(8574,take the False branch),(8575,take the False branch),(8576,take the False branch),(8579,write of variable `cur'),(8581,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="593">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8639" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNamespaceURIFunction
   line-by-line trace: 8623,(8625,take the False branch),(8627,take the True branch),8628,8629,8628,8630,(8632,take the False branch),(8632,take the False branch),(8633,take the False branch),(8634,take the False branch),(8637,write of variable `cur'),(8639,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="594">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8699" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNameFunction
   line-by-line trace: 8684,(8686,take the True branch),8687,8688,8687,8689,(8692,take the False branch),(8692,take the False branch),(8693,take the False branch),(8694,take the True branch),(8695,take the False branch),(8697,write of variable `cur'),(8699,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="595">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8830" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathStringLengthFunction
   line-by-line trace: 8808,(8810,take the False branch),(8825,take the False branch),(8825,take the False branch),(8826,take the True branch),(8826,take the True branch),(8827,take the False branch),(8827,take the False branch),(8828,write of variable `cur'),8829,(8830,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="596">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8904" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathContainsFunction
   line-by-line trace: 8890,(8892,take the False branch),(8892,take the False branch),(8893,take the False branch),(8894,take the False branch),(8894,take the False branch),(8895,write of variable `needle'),(8896,take the False branch),8897,(8899,take the False branch),(8899,take the False branch),(8904,deref of variable `needle')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `needle' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="597">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8939" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathStartsWithFunction
   line-by-line trace: 8924,8925,(8927,take the False branch),(8927,take the False branch),(8928,take the False branch),(8929,take the False branch),(8929,take the False branch),(8930,write of variable `needle'),(8931,take the True branch),(8931,take the False branch),8932,(8934,take the False branch),(8934,take the False branch),(8939,deref of variable `needle')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `needle' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="598">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="8996" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringFunction
   line-by-line trace: 8978,8979,8980,8981,(8983,take the True branch),(8984,take the False branch),(8984,take the False branch),(8986,take the False branch),(8992,take the True branch),(8993,take the True branch),(8993,take the True branch),(8994,take the False branch),(8994,take the False branch),(8995,write of variable `len'),(8996,deref of variable `len')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `len' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="599">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9003" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringFunction
   line-by-line trace: 8978,8979,8980,8981,(8983,take the True branch),(8984,take the False branch),(8984,take the False branch),(8986,take the False branch),(8992,take the False branch),(9000,take the False branch),(9001,take the False branch),(9001,take the False branch),(9002,write of variable `start'),(9003,deref of variable `start')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `start' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="600">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9008" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringFunction
   line-by-line trace: 8978,8979,8980,8981,(8983,take the True branch),(8984,take the False branch),(8984,take the False branch),(8986,take the False branch),(8992,take the False branch),(9000,take the False branch),(9001,take the False branch),(9001,take the False branch),9002,9003,9004,(9005,take the True branch),(9005,take the True branch),(9006,take the False branch),(9006,take the False branch),(9007,write of variable `str'),(9008,deref of variable `str')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `str' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="601">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9101" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringBeforeFunction
   line-by-line trace: 9087,9088,9089,9090,9091,(9093,take the False branch),(9093,take the False branch),(9094,take the False branch),(9095,write of variable `find'),(9096,take the True branch),(9096,take the True branch),9097,9099,(9100,take the True branch),(9101,deref of variable `find')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `find' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="602">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9101" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringBeforeFunction
   line-by-line trace: 9087,9088,9089,9090,9091,(9093,take the False branch),(9093,take the False branch),(9094,take the False branch),9095,(9096,take the True branch),(9096,take the True branch),(9097,write of variable `str'),9099,(9100,take the True branch),(9101,deref of variable `str')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `str' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="603">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9144" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringAfterFunction
   line-by-line trace: 9130,9131,9132,9133,9134,(9136,take the False branch),(9136,take the False branch),(9137,take the True branch),(9137,take the False branch),(9138,write of variable `find'),(9139,take the False branch),9140,9142,(9143,take the True branch),(9144,deref of variable `find')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `find' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="604">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9144" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringAfterFunction
   line-by-line trace: 9130,9131,9132,9133,9134,(9136,take the False branch),(9136,take the False branch),(9137,take the True branch),(9137,take the False branch),9138,(9139,take the False branch),(9140,write of variable `str'),9142,(9143,take the True branch),(9144,deref of variable `str')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `str' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="605">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9192" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNormalizeFunction
   line-by-line trace: (9174,write of variable `obj'),9175,9176,9177,(9179,take the False branch),(9180,take the False branch),(9188,take the False branch),(9188,take the False branch),(9189,take the False branch),(9190,take the False branch),(9190,take the False branch),(9191,write of variable `obj'),(9192,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="606">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9265" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathTranslateFunction
   line-by-line trace: 9245,9246,9247,9248,9249,9250,9251,9252,(9254,take the False branch),(9254,take the False branch),(9256,take the False branch),(9257,write of variable `to'),(9258,take the False branch),9259,(9260,take the False branch),9261,9263,(9264,take the True branch),(9265,deref of variable `to')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `to' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="607">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9266" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathTranslateFunction
   line-by-line trace: 9245,9246,9247,9248,9249,9250,9251,9252,(9254,take the False branch),(9254,take the False branch),(9256,take the False branch),9257,(9258,take the False branch),9259,(9260,take the False branch),(9261,write of variable `str'),9263,(9264,take the True branch),9265,(9266,deref of variable `str')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `str' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="608">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9267" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathTranslateFunction
   line-by-line trace: 9245,9246,9247,9248,9249,9250,9251,9252,(9254,take the False branch),(9254,take the False branch),(9256,take the False branch),9257,(9258,take the False branch),(9259,write of variable `from'),(9260,take the False branch),9261,9263,(9264,take the True branch),9265,(9266,take the True branch),(9267,deref of variable `from')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `from' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="609">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9409" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathLangFunction
   line-by-line trace: (9399,write of variable `val'),9400,9401,9402,9403,(9405,take the False branch),(9405,take the False branch),(9406,take the True branch),(9406,take the True branch),(9407,take the False branch),(9407,take the False branch),(9408,write of variable `val'),(9409,deref of variable `val')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `val' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="610">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="9481" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSumFunction
   line-by-line trace: 9470,9471,9472,(9474,take the False branch),(9474,take the False branch),(9475,take the False branch),(9476,take the False branch),(9479,write of variable `cur'),(9481,deref of variable `cur')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `cur' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="611">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="12066" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNodeCollectAndTest
   line-by-line trace: 11911,11912,11913,11914,11915,11916,11921,11923,11925,11926,11927,11929,11931,11936,11937,11939,11940,11941,11942,11944,11946,11947,11948,11949,11950,(11953,take the False branch),(11953,take the False branch),(11954,write of variable `obj'),(11958,take the True branch),11959,(11960,take the False branch),11978,11979,11980,12049,12050,12051,12052,12053,12054,(12062,take the False branch),(12066,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="612">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="12593" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEvalFirst
   line-by-line trace: 12551,12552,12553,(12555,take the False branch),12556,12557,12560,12561,12562,12561,(12564,take the False branch),12568,12567,12566,(12565,take the False branch),12583,12584,12583,(12586,take the False branch),(12587,take the False branch),(12587,take the False branch),12588,(12590,take the False branch),(12590,take the False branch),(12591,write of variable `arg1'),(12593,deref of variable `arg1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="613">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="12594" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEvalFirst
   line-by-line trace: 12551,12552,12553,(12555,take the False branch),12556,12557,12560,12561,12562,12561,(12564,take the False branch),12568,12567,12566,(12565,take the False branch),12583,12584,12583,(12586,take the False branch),(12587,take the False branch),(12587,take the False branch),(12588,write of variable `arg2'),(12590,take the False branch),(12590,take the False branch),12591,12593,(12594,deref of variable `arg2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="614">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="12728" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEvalLast
   line-by-line trace: 12675,12676,12677,12678,12679,12680,12681,(12683,take the False branch),12684,12685,12688,12689,12690,12691,12692,12693,12694,12693,(12695,take the False branch),12699,12698,12697,(12696,take the True branch),(12697,take the True branch),(12698,take the False branch),12710,12711,12712,12713,12714,12715,12714,(12716,take the False branch),12720,12719,12718,(12717,take the True branch),(12718,take the True branch),(12719,take the True branch),(12720,take the True branch),(12722,take the False branch),(12722,take the False branch),12723,(12725,take the False branch),(12725,take the False branch),(12726,write of variable `arg1'),(12728,deref of variable `arg1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="615">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="12729" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEvalLast
   line-by-line trace: 12675,12676,12677,12678,12679,12680,12681,(12683,take the False branch),12684,12685,12688,12689,12690,12691,12692,12693,12694,12693,(12695,take the False branch),12699,12698,12697,(12696,take the True branch),(12697,take the True branch),(12698,take the False branch),12710,12711,12712,12713,12714,12715,12714,(12716,take the False branch),12720,12719,12718,(12717,take the True branch),(12718,take the True branch),(12719,take the True branch),(12720,take the True branch),(12722,take the False branch),(12722,take the False branch),(12723,write of variable `arg2'),(12725,take the False branch),(12725,take the False branch),12726,12728,(12729,deref of variable `arg2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="616">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="12875" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEvalFilterFirst
   line-by-line trace: 12795,12796,12797,12798,12799,12800,12801,12802,(12804,take the False branch),12805,12810,(12809,take the False branch),(12850,take the True branch),12851,(12852,take the False branch),(12853,take the False branch),(12855,take the False branch),12859,(12863,take the True branch),12864,12865,12866,(12873,take the False branch),(12873,take the False branch),(12874,write of variable `obj'),(12875,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="617">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="13060" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEvalFilterFirst
   line-by-line trace: 12795,12796,12797,12798,12799,12800,12801,12802,(12804,take the False branch),12805,12810,(12809,take the False branch),(12850,take the True branch),12851,(12852,take the False branch),(12853,take the False branch),(12855,take the False branch),12859,(12863,take the False branch),(12971,take the False branch),(12971,take the False branch),12972,12973,12975,12976,12977,(12979,take the False branch),(12979,take the False branch),12996,12997,(13003,write of variable `newset'),(13006,take the True branch),13011,(13012,take the True branch),(13013,take the True branch),13014,(13015,take the False branch),13019,13020,13019,13022,13023,13024,(13025,take the True branch),13026,(13027,take the False branch),13036,(13037,take the True branch),13038,(13043,take the True branch),13044,(13046,take the True branch),13047,13053,13056,(13060,deref of variable `newset')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `newset' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="618">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="13261" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEval
   line-by-line trace: 13095,13096,13097,13098,13099,13100,13101,13102,(13104,take the False branch),13105,13106,13242,13243,13244,13245,13246,13247,(13248,take the False branch),13249,13250,13251,13252,13253,(13254,take the False branch),(13255,take the False branch),(13255,take the False branch),13256,(13258,take the False branch),(13258,take the False branch),(13259,write of variable `arg1'),(13261,deref of variable `arg1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="619">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="13262" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEval
   line-by-line trace: 13095,13096,13097,13098,13099,13100,13101,13102,(13104,take the False branch),13105,13106,13242,13243,13244,13245,13246,13247,(13248,take the False branch),13249,13250,13251,13252,13253,(13254,take the False branch),(13255,take the False branch),(13255,take the False branch),(13256,write of variable `arg2'),(13258,take the False branch),(13258,take the False branch),13259,(13261,take the False branch),(13262,deref of variable `arg2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `arg2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="620">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="13553" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEval
   line-by-line trace: 13095,13096,13097,13098,13099,13100,13101,13102,(13104,take the False branch),13105,13106,13421,13422,13423,13424,13425,13426,13427,13428,13445,(13433,take the True branch),(13433,take the True branch),(13444,take the False branch),(13445,take the False branch),13478,(13477,take the True branch),(13477,take the True branch),(13478,take the True branch),(13479,take the True branch),13480,13486,13485,13484,13483,(13482,take the True branch),(13483,take the True branch),(13484,take the True branch),(13485,take the True branch),(13486,take the True branch),13488,(13486,take the False branch),(13527,take the False branch),(13530,take the False branch),(13531,take the False branch),(13533,take the False branch),13536,(13542,take the True branch),13543,13544,(13551,take the False branch),(13551,take the False branch),(13552,write of variable `obj'),(13553,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="621">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="13813" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEval
   line-by-line trace: 13095,13096,13097,13098,13099,13100,13101,13102,(13104,take the False branch),13105,13106,13790,13791,13792,13793,13794,13795,13796,13797,(13799,take the False branch),(13802,take the False branch),(13805,take the True branch),(13811,take the False branch),(13811,take the False branch),(13812,write of variable `obj'),(13813,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="622">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="13852" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompOpEval
   line-by-line trace: 13095,13096,13097,13098,13099,13100,13101,13102,(13104,take the False branch),13105,13106,13790,13791,13792,13793,13794,13795,13796,13797,(13799,take the False branch),(13802,take the False branch),(13805,take the True branch),(13811,take the False branch),(13811,take the False branch),13812,13813,(13815,take the False branch),(13815,take the False branch),13828,(13830,take the True branch),13835,13836,13837,13838,13839,13838,13840,(13842,take the True branch),13843,13845,13843,(13846,take the False branch),(13851,write of variable `res'),(13852,deref of variable `res')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `res' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="623">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="14507" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathTryStreamCompile
   line-by-line trace: 14463,14464,14465,(14466,write of variable `namespaces'),14467,14468,(14470,take the True branch),(14470,take the True branch),(14471,take the True branch),14472,14483,(14484,take the True branch),(14485,take the False branch),(14485,take the False branch),(14485,take the False branch),(14488,take the False branch),14506,(14507,deref of variable `namespaces')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `namespaces' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="624">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="14722" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCompiledEvalInternal
   line-by-line trace: 14681,14683,14685,(14687,take the False branch),(14689,take the False branch),14691,14694,(14695,take the True branch),14696,(14706,write of variable `pctxt'),14707,(14709,take the False branch),(14722,deref of variable `pctxt')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pctxt' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="625">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="15020" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathEscapeUriFunction
   line-by-line trace: 15001,15002,15003,15004,15005,(15007,take the False branch),(15007,take the False branch),15009,(15011,take the False branch),(15012,write of variable `str'),15014,15016,15017,(15019,take the True branch),(15020,deref of variable `str')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `str' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="626">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="928" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrGetChildNo
   line-by-line trace: 922,923,924,(926,take the False branch),(926,take the False branch),(927,write of variable `obj'),(928,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="627">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1375" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrEval
   line-by-line trace: 1364,1365,1366,1367,1369,(1371,take the False branch),(1371,take the False branch),(1374,write of variable `ctxt'),(1375,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ctxt' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="628">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1799" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrStartPointFunction
   line-by-line trace: 1788,1789,1790,(1792,take the False branch),(1792,take the False branch),(1793,take the False branch),(1794,take the True branch),(1795,take the False branch),(1798,write of variable `obj'),(1799,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="629">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1893" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrEndPointFunction
   line-by-line trace: 1882,1883,1884,(1886,take the False branch),(1886,take the False branch),(1887,take the False branch),(1888,take the False branch),(1892,write of variable `obj'),(1893,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="630">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2039" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrRangeFunction
   line-by-line trace: 2027,2028,2029,2030,(2032,take the False branch),(2032,take the False branch),(2033,take the False branch),(2034,take the False branch),(2038,write of variable `set'),(2039,deref of variable `set')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `set' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="631">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2185" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrRangeInsideFunction
   line-by-line trace: 2173,2174,2175,2176,(2178,take the False branch),(2178,take the False branch),(2179,take the False branch),(2180,take the True branch),(2181,take the False branch),(2184,write of variable `set'),(2185,deref of variable `set')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `set' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="632">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2238" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrRangeToFunction
   line-by-line trace: 2222,2223,2224,2225,2226,2227,2228,(2230,take the False branch),(2231,take the False branch),(2231,take the False branch),(2236,take the False branch),(2236,take the False branch),(2237,write of variable `obj'),(2238,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="633">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2799" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrStringRangeFunction
   line-by-line trace: 2762,2763,2764,2765,2766,2767,2768,2769,2770,(2775,take the False branch),(2775,take the False branch),(2778,take the False branch),(2784,take the True branch),(2785,take the False branch),(2785,take the False branch),2786,(2787,take the True branch),2788,(2790,take the False branch),(2790,take the False branch),2791,(2792,take the False branch),(2793,take the False branch),(2797,write of variable `set'),2798,(2799,deref of variable `set')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `set' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="634">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2841" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrStringRangeFunction
   line-by-line trace: 2762,2763,2764,2765,2766,2767,2768,2769,2770,(2775,take the False branch),(2775,take the False branch),(2778,take the False branch),(2784,take the True branch),(2785,take the False branch),(2785,take the False branch),2786,(2787,take the True branch),2788,(2790,take the False branch),(2790,take the False branch),(2791,write of variable `string'),(2792,take the False branch),(2793,take the False branch),2797,2798,(2799,take the False branch),(2802,take the True branch),2803,2808,2809,2810,2812,(2818,take the True branch),2823,2824,2825,2826,2838,2839,2840,2841,2842,(2841,deref of variable `string')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `string' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="635">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2924" path="chrome-5.0.375.70/third_party/libxml/xpointer.c">
   <explanation>
   function or method: xmlXPtrEvalRangePredicate
   line-by-line trace: 2901,2902,2903,2904,2905,2906,(2908,take the False branch),(2910,take the False branch),(2910,take the True branch),(2910,take the False branch),(2910,take the False branch),(2911,take the False branch),(2914,take the True branch),(2915,take the False branch),(2915,take the False branch),(2915,take the False branch),(2922,take the False branch),(2922,take the False branch),(2923,write of variable `obj'),(2924,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="636">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="255" path="chrome-5.0.375.70/third_party/libxslt/libxslt/attributes.c">
   <explanation>
   function or method: xsltMergeAttrElemList
   line-by-line trace: 201,202,(204,take the True branch),(205,take the False branch),212,213,(214,take the True branch),(215,take the False branch),(221,take the True branch),(221,take the True branch),222,223,244,(247,take the True branch),(252,take the True branch),(253,write of variable `list'),(254,take the True branch),(255,deref of variable `list')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `list' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="637">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="191" path="chrome-5.0.375.70/third_party/libxslt/libxslt/extra.c">
   <explanation>
   function or method: xsltFunctionLocalTime
   line-by-line trace: 173,174,175,176,177,178,179,180,(182,take the False branch),(189,write of variable `obj'),(191,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="638">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="277" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltDocumentFunction
   line-by-line trace: 227,228,(231,take the False branch),(231,take the False branch),(238,take the False branch),(245,take the True branch),(246,take the False branch),253,(256,take the True branch),257,258,260,(261,write of variable `ret'),(263,take the True branch),(264,take the True branch),265,266,265,267,(268,take the True branch),269,275,276,(277,deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="639">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="278" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltDocumentFunction
   line-by-line trace: 227,228,(231,take the False branch),(231,take the False branch),(238,take the False branch),(245,take the True branch),(246,take the False branch),253,(256,take the True branch),257,258,260,261,(263,take the True branch),(264,take the True branch),265,266,265,267,(268,take the True branch),269,275,(276,write of variable `newobj'),277,(278,deref of variable `newobj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `newobj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="640">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="302" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltDocumentFunction
   line-by-line trace: 227,228,(231,take the False branch),(231,take the False branch),(238,take the False branch),(245,take the True branch),(246,take the False branch),253,(256,take the False branch),292,(293,take the False branch),(301,write of variable `obj'),(302,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="641">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="395" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltKeyFunction
   line-by-line trace: 353,(355,take the False branch),365,366,368,(367,take the False branch),(368,take the False branch),(368,take the False branch),379,(381,take the False branch),(381,take the True branch),382,383,(385,write of variable `ret'),(387,take the True branch),(388,take the True branch),389,390,391,390,392,393,394,(395,deref of variable `ret')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ret' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="642">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="396" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltKeyFunction
   line-by-line trace: 353,(355,take the False branch),365,366,368,(367,take the False branch),(368,take the False branch),(368,take the False branch),379,(381,take the False branch),(381,take the True branch),382,383,385,(387,take the True branch),(388,take the True branch),389,390,391,390,392,393,(394,write of variable `newobj'),395,(396,deref of variable `newobj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `newobj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="643">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="413" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltKeyFunction
   line-by-line trace: 353,(355,take the False branch),365,366,368,(367,take the False branch),(368,take the False branch),(368,take the False branch),379,(381,take the False branch),(381,take the False branch),402,403,404,405,406,407,408,409,(411,write of variable `tctxt'),(413,deref of variable `tctxt')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tctxt' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="644">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="425" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltKeyFunction
   line-by-line trace: 353,(355,take the False branch),365,366,368,(367,take the False branch),(368,take the False branch),(368,take the False branch),(379,write of variable `obj1'),(381,take the False branch),(381,take the False branch),402,403,404,405,406,407,408,409,411,413,(415,take the False branch),(425,deref of variable `obj1')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj1' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="645">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="460" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltKeyFunction
   line-by-line trace: 353,(355,take the False branch),(365,write of variable `obj2'),366,368,(367,take the False branch),(368,cmp_nonnull of variable `obj2'),(368,take the False branch),(368,take the False branch),379,(381,deref of variable `obj2'),(381,take the False branch),(381,deref of variable `obj2'),(381,take the False branch),402,403,404,405,406,407,408,409,411,413,(415,take the False branch),425,426,(427,take the True branch),428,429,(430,take the True branch),431,451,452,(453,take the False branch),(453,take the False branch),(459,write of variable `obj2'),(460,deref of variable `obj2')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj2' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="646">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="560" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltUnparsedEntityURIFunction
   line-by-line trace: 550,551,(553,take the False branch),(553,take the False branch),(559,write of variable `obj'),(560,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="647">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="614" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltFormatNumberFunction
   line-by-line trace: 594,595,(596,write of variable `decimalObj'),597,598,599,600,602,(603,take the False branch),605,(606,take the False branch),608,610,611,(612,take the True branch),(612,take the False branch),(613,write of variable `decimalObj'),(614,deref of variable `decimalObj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `decimalObj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="648">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="633" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltFormatNumberFunction
   line-by-line trace: 594,(595,write of variable `formatObj'),596,597,598,599,600,602,(603,take the False branch),605,(606,take the False branch),608,610,611,(612,take the True branch),(612,take the False branch),613,614,(615,take the True branch),(616,user_error_fun of function `xsltTransformError'),618,616,621,(622,take the False branch),(623,write of variable `formatObj'),(624,take the True branch),(624,take the False branch),625,626,628,(631,take the True branch),635,634,(633,deref of variable `formatObj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `formatObj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="649">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="634" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltFormatNumberFunction
   line-by-line trace: (594,write of variable `numberObj'),595,596,597,598,599,600,602,(603,take the False branch),605,(606,take the False branch),608,610,611,(612,take the True branch),(612,take the False branch),613,614,(615,take the True branch),(616,user_error_fun of function `xsltTransformError'),618,616,621,(622,take the False branch),623,(624,take the True branch),(624,take the False branch),(625,write of variable `numberObj'),626,628,(631,take the True branch),635,(634,deref of variable `numberObj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `numberObj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="650">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="674" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltGenerateIdFunction
   line-by-line trace: 656,657,658,(660,take the False branch),(662,take the True branch),663,664,665,(667,take the False branch),(667,take the False branch),(673,write of variable `obj'),(674,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="651">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="730" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltSystemPropertyFunction
   line-by-line trace: 713,714,715,(717,take the False branch),(723,take the False branch),(723,take the False branch),(729,write of variable `obj'),(730,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="652">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="834" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltElementAvailableFunction
   line-by-line trace: 805,806,807,808,(810,take the False branch),816,(817,take the False branch),(817,take the False branch),(823,write of variable `obj'),824,(825,take the False branch),(834,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="653">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="891" path="chrome-5.0.375.70/third_party/libxslt/libxslt/functions.c">
   <explanation>
   function or method: xsltFunctionAvailableFunction
   line-by-line trace: 872,873,874,(876,take the False branch),882,(883,take the False branch),(883,take the False branch),(889,write of variable `obj'),(891,deref of variable `obj')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `obj' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="654">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="290" path="chrome-5.0.375.70/third_party/libxslt/libxslt/keys.c">
   <explanation>
   function or method: xsltAddKey
   line-by-line trace: 277,278,279,(281,take the False branch),(281,take the False branch),(281,take the False branch),(281,take the False branch),285,(289,write of variable `key'),(290,deref of variable `key')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `key' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="655">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="340" path="chrome-5.0.375.70/third_party/libxslt/libxslt/pattern.c">
   <explanation>
   function or method: xsltCompMatchAdd
   line-by-line trace: (296,take the False branch),311,312,313,314,315,(316,take the True branch),317,318,317,319,320,319,321,322,321,(331,take the True branch),332,(334,take the True branch),(335,write of variable `xctxt'),(339,take the True branch),(340,deref of variable `xctxt')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `xctxt' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="656">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="785" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltCopyTextString
   line-by-line trace: 716,717,(719,take the False branch),(723,take the False branch),(732,take the False branch),(732,take the True branch),733,737,741,740,739,(738,take the False branch),(758,take the False branch),776,(775,take the True branch),(775,take the True branch),(776,take the False branch),(780,write of variable `copy'),(782,take the True branch),(782,cmp_nonnull of variable `copy'),(783,take the True branch),(784,write of variable `copy'),(785,deref of variable `copy')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `copy' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="657">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1203" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltShallowCopyElem
   line-by-line trace: 1161,(1163,take the False branch),(1163,take the False branch),(1165,take the False branch),(1166,take the False branch),(1169,write of variable `copy'),(1170,take the True branch),(1170,cmp_nonnull of variable `copy'),(1171,deref of variable `copy'),(1172,write of variable `copy'),(1174,take the True branch),(1178,take the False branch),(1196,take the True branch),(1197,take the True branch),(1203,deref of variable `copy')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `copy' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="658">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1511" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltCopyTreeInternal
   line-by-line trace: 1454,(1456,take the False branch),1458,1492,(1494,take the False branch),(1502,write of variable `copy'),(1503,take the True branch),(1503,cmp_nonnull of variable `copy'),(1504,deref of variable `copy'),(1505,write of variable `copy'),(1509,take the False branch),(1511,deref of variable `copy')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `copy' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="659">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4011" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltElement
   line-by-line trace: 3879,3881,3882,3883,3884,(3886,take the False branch),(3893,take the False branch),3899,(3901,take the True branch),3903,(3905,take the False branch),(3910,take the False branch),3916,3917,(3918,take the False branch),(3941,take the True branch),(3942,write of variable `copy'),(3946,take the False branch),(3951,write of variable `copy'),(3957,take the True branch),(3958,take the False branch),3965,3970,(3977,take the False branch),3979,(4009,take the False branch),4012,(4011,deref of variable `copy')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `copy' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="660">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4073" path="chrome-5.0.375.70/third_party/libxslt/libxslt/transform.c">
   <explanation>
   function or method: xsltComment
   line-by-line trace: (4065,write of variable `value'),4066,4067,(4069,write of variable `value'),4071,(4072,take the True branch),(4073,deref of variable `value')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `value' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="661">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2191" path="chrome-5.0.375.70/third_party/skia/src/core/SkDraw.cpp">
   <explanation>
   function or method: SkDraw::drawVertices
   line-by-line trace: (2103,take the True branch),(2103,take the True branch),(2103,take the False branch),(2106,take the False branch),(2106,take the True branch),(2106,take the False branch),(2106,take the False branch),(2107,take the True branch),(2107,take the False branch),2112,2113,2114,(2116,take the False branch),2135,2136,(2138,write of variable `shader'),(2139,take the False branch),(2141,cmp_nonnull of variable `shader'),(2142,take the True branch),2144,(2145,write of variable `shader'),(2149,take the True branch),(2150,take the True branch),2152,2170,2172,2173,(2175,take the False branch),(2175,take the True branch),2176,(2177,take the False branch),(2179,take the False branch),(2185,take the True branch),(2186,take the True branch),(2187,take the True branch),(2188,take the True branch),2189,(2191,deref of variable `shader')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `shader' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="662">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1117" path="chrome-5.0.375.70/third_party/sqlite/ext/async/sqlite3async.c">
   <explanation>
   function or method: asyncOpen
   line-by-line trace: 1009,1025,1026,1027,1028,1029,1030,(1031,write of variable `pLock'),1032,1033,(1036,take the True branch),1037,1040,1041,1042,1041,1042,1040,1045,(1046,take the False branch),1049,1050,1051,1052,1053,1054,1055,1056,(1058,take the True branch),1059,1060,1061,1062,(1065,take the False branch),1079,(1081,take the False branch),(1109,take the True branch),1110,1111,(1116,take the True branch),(1117,deref of variable `pLock')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pLock' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="663">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5790" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: loadSegmentLeavesInt
   line-by-line trace: (5696,write of variable `pBuffers'),5697,(5699,take the True branch),(5701,take the True branch),(5701,take the False branch),5778,(5787,take the True branch),(5787,take the True branch),5788,(5789,take the True branch),(5790,deref of variable `pBuffers')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pBuffers' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="664">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="267" path="chrome-5.0.375.70/third_party/sqlite/src/attach.c">
   <explanation>
   function or method: detachFunc
   line-by-line trace: 239,240,241,(242,write of variable `pDb'),243,245,(247,take the True branch),(248,take the False branch),251,(254,take the False branch),(258,take the False branch),(262,take the False branch),(267,deref of variable `pDb')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pDb' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="665">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4135" path="chrome-5.0.375.70/third_party/sqlite/src/btree.c">
   <explanation>
   function or method: moveToRightmost
   line-by-line trace: 4123,4124,(4125,write of variable `pPage'),4127,4128,(4129,take the False branch),(4134,take the True branch),(4135,deref of variable `pPage')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pPage' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="666">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4651" path="chrome-5.0.375.70/third_party/sqlite/src/btree.c">
   <explanation>
   function or method: allocateBtreePage
   line-by-line trace: 4583,4584,4585,4586,(4587,write of variable `pTrunk'),4588,4589,4591,4592,4593,4594,(4596,take the False branch),(4599,take the True branch),4601,4602,(4609,take the True branch),(4609,take the True branch),4610,4611,4612,4613,(4614,take the False branch),(4615,take the True branch),4616,4618,4625,(4626,take the False branch),4627,4633,4634,(4635,take the True branch),4636,(4641,take the True branch),4642,(4646,take the False branch),(4651,deref of variable `pTrunk')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pTrunk' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="667">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="6280" path="chrome-5.0.375.70/third_party/sqlite/src/btree.c">
   <explanation>
   function or method: balance_deeper
   line-by-line trace: 6248,(6249,write of variable `pChild'),6250,6251,6253,6254,6260,(6261,take the False branch),(6268,take the False branch),6273,6274,6275,(6280,deref of variable `pChild')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pChild' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="668">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2751" path="chrome-5.0.375.70/third_party/sqlite/src/build.c">
   <explanation>
   function or method: sqlite3CreateIndex
   line-by-line trace: 2366,2367,2368,2369,2370,2371,2372,2373,2374,2375,2376,(2377,write of variable `pName'),2378,2379,2380,2381,2383,2384,(2385,take the False branch),(2385,take the False branch),(2388,take the False branch),(2395,take the False branch),2430,2431,(2432,take the False branch),2433,2435,2437,2438,2440,(2439,take the True branch),(2440,take the False branch),(2445,take the False branch),(2451,take the False branch),(2470,take the False branch),2489,2490,(2491,take the False branch),2492,(2493,take the False branch),2502,(2503,take the True branch),(2503,take the True branch),(2503,take the False branch),2506,(2507,take the True branch),(2507,take the True branch),(2508,take the False branch),(2518,take the False branch),(2530,take the False branch),2545,2546,2547,2548,2549,2548,2550,2549,2551,2550,2552,2551,2552,2553,2547,(2556,take the False branch),2559,2560,2561,2562,2563,2564,2565,2566,2567,2568,2569,2570,(2574,take the True branch),2575,(2590,take the False branch),2632,(2634,take the False branch),(2697,take the False branch),2729,2730,2731,2733,(2734,take the False branch),2739,2740,(2745,take the True branch),2746,2748,(2751,deref of variable `pName')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pName' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="669">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="381" path="chrome-5.0.375.70/third_party/sqlite/src/callback.c">
   <explanation>
   function or method: sqlite3FindFunction
   line-by-line trace: 335,(336,write of variable `pBest'),337,338,341,342,346,(347,take the False branch),(364,take the True branch),(364,take the True branch),365,366,(367,take the False branch),(381,take the True branch),(381,take the False branch),(381,deref of variable `pBest')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pBest' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="670">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2396" path="chrome-5.0.375.70/third_party/sqlite/src/expr.c">
   <explanation>
   function or method: sqlite3ExprCodeTarget
   line-by-line trace: 2081,2082,2083,2084,2085,2086,2087,2089,(2090,take the False branch),(2095,take the True branch),2096,2100,2345,2346,2347,2348,2349,2350,2351,2352,2353,2354,2355,2357,(2360,take the True branch),(2361,write of variable `pFarg'),(2365,take the False branch),2366,2367,2368,2369,(2370,take the False branch),(2374,take the False branch),2380,(2395,take the True branch),(2395,take the True branch),(2396,deref of variable `pFarg')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pFarg' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="671">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1003" path="chrome-5.0.375.70/third_party/sqlite/src/func.c">
   <explanation>
   function or method: trimFunc
   line-by-line trace: 954,955,956,957,958,(959,write of variable `aLen'),960,961,(963,take the False branch),966,(967,take the False branch),968,969,(970,take the False branch),(977,take the False branch),980,(981,take the False branch),(984,take the False branch),(997,take the True branch),998,(999,take the True branch),(1000,take the True branch),1001,(1002,take the True branch),(1003,deref of variable `aLen')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `aLen' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="672">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1004" path="chrome-5.0.375.70/third_party/sqlite/src/func.c">
   <explanation>
   function or method: trimFunc
   line-by-line trace: 954,955,956,957,958,959,(960,write of variable `azChar'),961,(963,take the False branch),966,(967,take the False branch),968,969,(970,take the False branch),(977,take the False branch),980,(981,take the False branch),(984,take the False branch),(997,take the True branch),998,(999,take the True branch),(1000,take the True branch),1001,(1002,take the True branch),1003,(1004,take the True branch),(1004,deref of variable `azChar')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `azChar' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="673">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="91" path="chrome-5.0.375.70/third_party/sqlite/src/legacy.c">
   <explanation>
   function or method: sqlite3_exec
   line-by-line trace: 39,40,41,(42,write of variable `azCols'),43,44,(46,take the True branch),48,(49,user_error_fun of function `sqlite3Error'),(50,take the False branch),(50,take the True branch),(50,take the True branch),(50,take the True branch),51,52,54,55,56,(57,take the False branch),(60,take the False branch),66,67,69,70,71,(74,take the True branch),(74,take the False branch),76,(75,take the True branch),(75,take the False branch),(109,take the True branch),110,111,(112,take the False branch),117,121,(122,write of variable `azCols'),(50,take the False branch),(50,take the True branch),(50,take the True branch),(50,take the True branch),51,52,54,55,56,(57,take the False branch),(60,take the False branch),66,67,69,70,71,(74,take the True branch),(74,take the False branch),76,(75,take the True branch),(75,take the True branch),(76,take the True branch),(77,take the False branch),(90,take the True branch),(91,deref of variable `azCols')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `azCols' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="674">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1744" path="chrome-5.0.375.70/third_party/sqlite/src/main.c">
   <explanation>
   function or method: openDatabase
   line-by-line trace: 1528,1529,1530,1532,1534,(1535,take the False branch),(1538,take the True branch),1539,(1547,take the True branch),1548,1561,1562,1563,1564,1565,1566,1567,1568,1569,1570,1561,(1575,write of variable `db'),(1576,take the False branch),(1577,take the True branch),(1578,deref of variable `db'),(1579,deref of variable `db'),(1579,take the True branch),1580,(1581,write of variable `db'),1582,1734,(1735,take the False branch),1739,(1740,take the False branch),(1743,take the True branch),(1744,deref of variable `db')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `db' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="675">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2043" path="chrome-5.0.375.70/third_party/sqlite/src/pager.c">
   <explanation>
   function or method: pager_playback
   line-by-line trace: 1881,1882,1883,1884,1885,1886,1887,(1888,write of variable `zMaster'),1889,1894,1895,(1896,take the False branch),(1896,take the True branch),1897,2012,2018,2032,(2034,take the False branch),(2039,take the False branch),(2043,take the True branch),(2043,deref of variable `zMaster')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `zMaster' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="676">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1179" path="chrome-5.0.375.70/third_party/sqlite/src/select.c">
   <explanation>
   function or method: selectColumnsFromExprList
   line-by-line trace: 1127,1128,1129,1130,1131,1132,1133,1134,1136,1137,(1138,take the False branch),(1139,take the True branch),1142,1143,(1145,write of variable `zName'),(1145,take the True branch),(1145,cmp_nonnull of variable `zName'),(1147,write of variable `zName'),(1167,take the False branch),1175,(1176,take the True branch),(1177,take the True branch),1178,(1179,deref of variable `zName')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `zName' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="677">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="2068" path="chrome-5.0.375.70/third_party/sqlite/src/select.c">
   <explanation>
   function or method: multiSelectOrderBy
   line-by-line trace: 1997,1998,1999,2000,2001,2002,2003,2004,2005,2006,2007,2008,2009,2010,2011,2012,2013,2014,2015,2016,2017,2018,2019,2020,2021,2022,2023,2024,2025,2026,2027,2028,2029,2030,2031,2033,2034,2035,2036,2037,2038,2039,2044,2045,2046,(2047,write of variable `pOrderBy'),2048,(2049,deref of variable `pOrderBy'),(2055,take the True branch),(2056,take the True branch),(2056,take the True branch),2057,(2058,deref of variable `pOrderBy'),(2058,take the True branch),2059,(2060,take the True branch),(2062,take the True branch),2063,(2064,take the False branch),2065,2066,(2067,write of variable `pOrderBy'),(2068,deref of variable `pOrderBy')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pOrderBy' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="678">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="358" path="chrome-5.0.375.70/third_party/sqlite/src/update.c">
   <explanation>
   function or method: sqlite3Update
   line-by-line trace: 97,98,99,100,101,102,103,104,105,(106,write of variable `aRegIdx'),107,110,111,112,113,114,115,116,117,120,121,123,126,127,128,129,130,131,132,134,135,(136,take the False branch),(136,take the False branch),139,143,(144,take the False branch),145,151,152,(162,take the False branch),(165,take the True branch),(165,take the False branch),168,(169,take the False branch),(170,take the False branch),177,(178,take the False branch),183,184,185,193,(194,take the False branch),(236,take the False branch),(237,take the False branch),(241,take the False branch),258,(259,take the False branch),(260,take the True branch),261,(265,take the False branch),275,(276,take the True branch),277,278,(280,take the False branch),(280,take the True branch),281,283,284,285,(288,take the True branch),289,293,(300,take the True branch),301,(308,take the False branch),314,315,(316,take the False branch),317,321,(322,take the True branch),323,324,329,(333,take the True branch),(333,take the True branch),334,335,(338,take the True branch),(345,take the True branch),(346,take the True branch),347,(357,take the True branch),(358,take the False branch),(358,deref of variable `aRegIdx')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `aRegIdx' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="679">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1131" path="chrome-5.0.375.70/third_party/sqlite/src/vdbeaux.c">
   <explanation>
   function or method: sqlite3VdbeList
   line-by-line trace: 1049,1050,(1051,write of variable `apSub'),1052,1053,1054,1055,1056,1058,1059,1060,1061,1067,(1069,take the False branch),1078,(1079,take the False branch),1090,1091,(1092,take the True branch),(1092,take the True branch),(1092,take the False branch),(1093,take the False branch),(1096,take the False branch),1101,1102,(1103,take the True branch),1104,(1113,take the True branch),1114,1115,1116,1117,1119,1120,1121,1122,1123,1124,1125,(1127,take the True branch),1128,1129,(1130,take the True branch),(1131,deref of variable `apSub')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `apSub' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="680">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1134" path="chrome-5.0.375.70/third_party/sqlite/src/vdbeaux.c">
   <explanation>
   function or method: sqlite3VdbeList
   line-by-line trace: 1049,1050,1051,(1052,write of variable `pSub'),1053,1054,1055,1056,1058,1059,1060,1061,1067,(1069,take the False branch),1078,(1079,take the False branch),1090,1091,(1092,take the True branch),(1092,take the True branch),(1092,take the False branch),(1093,take the False branch),(1096,take the False branch),1101,1102,(1103,take the True branch),1104,(1113,take the True branch),1114,1115,1116,1117,1119,1120,1121,1122,1123,1124,1125,(1127,take the True branch),1128,1129,(1130,take the True branch),(1131,take the True branch),(1133,take the True branch),(1133,take the True branch),(1134,deref of variable `pSub')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pSub' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="681">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="234" path="chrome-5.0.375.70/third_party/sqlite/src/vdbeblob.c">
   <explanation>
   function or method: sqlite3_blob_open
   line-by-line trace: 48,49,66,(83,write of variable `v'),84,85,86,87,89,90,91,(92,take the False branch),96,97,98,100,107,108,(109,take the True branch),(109,take the False branch),(114,take the True branch),(114,take the True branch),115,(116,user_error_fun of function `sqlite3ErrorMsg'),(119,take the False branch),(132,take the True branch),(133,take the True branch),134,(137,take the False branch),(150,take the False branch),(168,write of variable `v'),(169,take the False branch),211,212,(213,take the False branch),(213,take the False branch),217,218,(219,take the False branch),(226,take the True branch),(226,take the False branch),(228,take the True branch),233,(234,deref of variable `v')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `v' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="682">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="498" path="chrome-5.0.375.70/third_party/zlib/contrib/minizip/unzip.c">
   <explanation>
   function or method: unzOpen2
   line-by-line trace: 405,406,407,409,411,413,417,(419,take the False branch),(422,take the True branch),423,427,429,427,(431,take the False branch),434,(435,take the True branch),436,438,439,438,(439,take the True branch),440,(443,take the False branch),(447,take the True branch),448,(451,take the False branch),(455,take the True branch),456,(459,take the False branch),463,(462,take the False branch),(463,take the False branch),(464,take the True branch),465,(468,take the False branch),(473,take the True branch),474,(477,take the True branch),478,(480,take the False branch),(484,take the False branch),490,491,490,492,493,494,(497,write of variable `s'),(498,deref of variable `s')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `s' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="683">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="343" path="chrome-5.0.375.70/v8/src/compilation-cache.cc">
   <explanation>
   function or method: v8::internal::CompilationCacheEval::Lookup
   line-by-line trace: (332,write of variable `result'),333,334,(335,take the False branch),339,(343,deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="684">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="393" path="chrome-5.0.375.70/v8/src/compilation-cache.cc">
   <explanation>
   function or method: v8::internal::CompilationCacheRegExp::Lookup
   line-by-line trace: (382,write of variable `result'),383,384,(385,take the False branch),389,(393,deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="685">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="153" path="chrome-5.0.375.70/v8/src/frames.cc">
   <explanation>
   function or method: v8::internal::StackFrameIterator::SingletonFor
   line-by-line trace: (150,take the False branch),(151,write of variable `result'),152,(153,deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="686">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="427" path="chrome-5.0.375.70/v8/src/ia32/stub-cache-ia32.cc">
   <explanation>
   function or method: v8::internal::LoadInterceptorCompiler::CompileCacheable
   line-by-line trace: (363,write of variable `callback'),364,(368,take the True branch),369,(378,take the False branch),384,(386,take the True branch),387,389,390,392,398,399,400,401,402,404,405,406,(407,take the True branch),408,411,(413,take the False branch),424,425,426,(427,deref of variable `callback')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `callback' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="687">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="378" path="chrome-5.0.375.70/v8/src/ic.cc">
   <explanation>
   function or method: v8::internal::CallIC::TryCallAsFunction
   line-by-line trace: 367,368,369,(371,take the True branch),375,376,(377,write of variable `frame'),(378,deref of variable `frame')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `frame' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="688">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="393" path="chrome-5.0.375.70/v8/src/ic.cc">
   <explanation>
   function or method: v8::internal::CallIC::ReceiverToObject
   line-by-line trace: 386,387,390,391,(392,write of variable `frame'),(393,deref of variable `frame')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `frame' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="689">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1419" path="chrome-5.0.375.70/v8/src/ic.cc">
   <explanation>
   function or method: v8::internal::BinaryOpIC::Clear
   line-by-line trace: (1408,take the False branch),(1412,write of variable `rinfo'),1413,(1414,take the False branch),1418,(1419,deref of variable `rinfo')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rinfo' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="690">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1377" path="chrome-5.0.375.70/v8/src/mark-compact.cc">
   <explanation>
   function or method: v8::internal::MapCompact::NextMapToEvacuate
   line-by-line trace: (1375,write of variable `map'),1376,(1377,deref of variable `map')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `map' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="691">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="1616" path="chrome-5.0.375.70/v8/src/mark-compact.cc">
   <explanation>
   function or method: v8::internal::UpdatingVisitor::UpdatePointer
   line-by-line trace: (1576,take the False branch),1578,1579,1580,1581,(1583,take the False branch),(1601,take the False branch),1607,(1608,write of variable `original_space'),(1609,take the False branch),1611,1613,1615,(1616,deref of variable `original_space')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `original_space' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="692">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="7297" path="chrome-5.0.375.70/v8/src/objects.cc">
   <explanation>
   function or method: v8::internal::JSObject::PrepareSlowElementsForSort
   line-by-line trace: 7233,7237,(7238,write of variable `result_double'),(7239,take the False branch),7246,(7247,take the False branch),7248,7250,7252,7253,7254,(7255,take the False branch),7282,7283,(7284,take the False branch),7290,(7292,take the False branch),7296,(7297,deref of variable `result_double')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result_double' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="693">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="7399" path="chrome-5.0.375.70/v8/src/objects.cc">
   <explanation>
   function or method: v8::internal::JSObject::PrepareElementsForSort
   line-by-line trace: (7307,take the False branch),(7309,take the False branch),7329,7334,7335,(7336,take the False branch),(7339,take the False branch),(7343,write of variable `result_double'),(7344,take the False branch),7352,7356,7357,7358,(7361,take the False branch),7385,(7386,take the False branch),(7390,take the False branch),(7395,take the False branch),7398,(7399,deref of variable `result_double')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result_double' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="694">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="3908" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::Parser::ParseV8Intrinsic
   line-by-line trace: (3863,take the False branch),(3864,take the False branch),3865,3866,3865,(3867,write of variable `args'),(3867,take the False branch),(3868,take the True branch),(3868,take the False branch),(3875,take the False branch),(3897,take the True branch),3900,3899,(3898,take the True branch),(3899,take the False branch),(3904,take the True branch),(3904,take the True branch),3907,(3908,take the True branch),(3908,deref of variable `args')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `args' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="695">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="4339" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::RegExpParser::ParsePattern
   line-by-line trace: (4335,write of variable `result'),(4335,take the False branch),4336,(4339,deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="696">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="5119" path="chrome-5.0.375.70/v8/src/parser.cc">
   <explanation>
   function or method: v8::internal::ParseRegExp
   line-by-line trace: 5108,5109,(5110,write of variable `tree'),(5111,take the False branch),5115,5116,5117,5118,(5119,deref of variable `tree')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tree' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="697">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="353" path="chrome-5.0.375.70/v8/src/platform-linux.cc">
   <explanation>
   function or method: v8::internal::OS::LogSharedLibraryAddresses
   line-by-line trace: 319,(320,take the False branch),323,(324,write of variable `lib_name'),(327,take the True branch),328,329,(331,take the False branch),(332,take the False branch),334,(335,take the True branch),(335,take the True branch),(335,take the True branch),338,339,(340,take the False branch),(341,take the False branch),(344,take the True branch),345,(348,take the False branch),(353,deref of variable `lib_name')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `lib_name' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="698">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="128" path="chrome-5.0.375.70/v8/src/utils.cc">
   <explanation>
   function or method: v8::internal::ReadLine
   line-by-line trace: (82,write of variable `result'),83,84,85,86,87,(88,take the False branch),127,(128,deref of variable `result')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `result' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="699">
  <name>
   PTR-null-pos-assign
  </name>
  <location line="793" path="chrome-5.0.375.70/webkit/glue/plugins/webplugin_impl.cc">
   <explanation>
   function or method: webkit_glue::WebPluginImpl::didReceiveResponse
   line-by-line trace: 735,736,(738,write of variable `client'),(739,take the False branch),742,743,745,(746,deref of variable `client'),(746,take the True branch),(747,take the False branch),(750,take the True branch),(760,take the False branch),767,769,(770,write of variable `client'),(773,take the False branch),779,(783,take the False branch),791,(793,deref of variable `client')
   </explanation>
  </location>
  <grade severity="1" probability="0.2"/>
  <output>
   <textoutput>
   Variable `client' is possibly assigned NULL, then dereferenced
   </textoutput>
  </output>
 </weakness>
 <weakness id="700">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="421" path="chrome-5.0.375.70/chrome/browser/sessions/session_restore.cc">
   <explanation>
   function or method: _GLOBAL__N__18_session_restore_cc_8f0468cb::SessionRestoreImpl::ShowBrowser
   line-by-line trace: (415,take the False branch),(420,cmp_nonnull_aux of variable `browser'),(421,deref of variable `browser')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `browser' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="701">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="310" path="chrome-5.0.375.70/chrome/browser/sessions/tab_restore_service.cc">
   <explanation>
   function or method: TabRestoreService::RestoreEntryById
   line-by-line trace: 249,(250,take the False branch),255,(256,take the False branch),(258,take the True branch),259,261,263,264,265,266,(271,take the False branch),(303,take the True branch),304,305,(306,write of variable `browser'),(307,take the True branch),308,309,(310,deref of variable `browser')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `browser' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="702">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="21" path="chrome-5.0.375.70/gfx/canvas.cc">
   <explanation>
   function or method: gfx::Canvas::GetClipRect
   line-by-line trace: 18,(19,take the True branch),(20,cmp_nonnull_aux of variable `r'),(21,deref of variable `r')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `r' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="703">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="302" path="chrome-5.0.375.70/native_client/src/trusted/plugin/srpc/closure.cc">
   <explanation>
   function or method: nacl_srpc::NpGetUrlClosure::Run
   line-by-line trace: 255,256,(258,take the True branch),(258,take the False branch),263,(264,take the True branch),(264,cmp_null of variable `stream'),(265,take the True branch),(265,take the False branch),266,287,293,295,(298,take the True branch),299,(302,deref of variable `stream')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `stream' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="704">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="324" path="chrome-5.0.375.70/net/disk_cache/file_posix.cc">
   <explanation>
   function or method: disk_cache::File::Read
   line-by-line trace: (311,take the False branch),(312,take the False branch),(318,take the False branch),(318,take the False branch),321,322,(324,deref of variable `completed')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `completed' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="705">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="697" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsecur.c">
   <explanation>
   function or method: ssl_ConfigSecureServer
   line-by-line trace: 680,681,(684,take the True branch),685,686,687,(690,take the False branch),(694,take the True branch),695,(697,deref of variable `keyPair')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `keyPair' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="706">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1569" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsnce.c">
   <explanation>
   function or method: SSL_InheritMPServerSIDCacheInstance
   line-by-line trace: 1505,1506,1507,1508,1509,1510,1511,1518,(1524,take the False branch),1531,1533,1534,1535,(1537,take the False branch),1544,(1545,take the False branch),1547,(1548,take the False branch),1550,1552,(1553,take the False branch),(1557,take the False branch),1562,(1564,take the False branch),1568,(1569,deref of variable `cache')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `cache' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="707">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="127" path="chrome-5.0.375.70/sdch/open-vcdiff/src/adler32.c">
   <explanation>
   function or method: adler32
   line-by-line trace: 102,103,106,107,(110,take the False branch),(121,cmp_null_aux of variable `buf'),(125,take the True branch),(126,take the True branch),(127,deref of variable `buf')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `buf' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="708">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="89" path="chrome-5.0.375.70/skia/ext/SkFontHost_fontconfig_ipc.cpp">
   <explanation>
   function or method: FontConfigIPC::Match
   line-by-line trace: (44,take the False branch),47,48,49,(50,take the True branch),51,(53,take the False branch),(54,take the False branch),56,58,59,(61,take the False branch),64,65,66,(67,take the False branch),(69,take the False branch),72,73,74,77,76,(75,take the False branch),(76,take the False branch),(77,take the False branch),(78,take the False branch),82,(83,take the False branch),(86,take the True branch),87,(88,cmp_nonnull_aux of variable `is_italic'),(89,deref of variable `is_italic')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `is_italic' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="709">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1266" path="chrome-5.0.375.70/third_party/WebKit/WebCore/page/FrameView.cpp">
   <explanation>
   function or method: WebCore::FrameView::scheduleRelayoutOfSubtree
   line-by-line trace: (1254,take the False branch),(1256,take the False branch),(1262,take the False branch),(1262,take the True branch),(1263,take the True branch),(1264,take the True branch),(1266,deref of variable `relayoutRoot')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `relayoutRoot' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="710">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="139" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBox.cpp">
   <explanation>
   function or method: WebCore::RenderBox::styleWillChange
   line-by-line trace: 128,(130,take the True branch),(133,take the True branch),(133,take the False branch),(139,take the True branch),(139,take the True branch),(139,deref of variable `newStyle')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `newStyle' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="711">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1005" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBox.cpp">
   <explanation>
   function or method: WebCore::RenderBox::mapLocalToContainer
   line-by-line trace: (963,take the False branch),(966,take the True branch),(967,take the True branch),(967,cmp_null_aux of variable `repaintContainer'),978,979,(980,take the False branch),983,(984,take the False branch),(985,take the True branch),988,992,(994,take the True branch),(994,take the True branch),(995,take the True branch),(995,take the False branch),(1000,take the True branch),(1002,take the True branch),(1005,deref of variable `repaintContainer')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `repaintContainer' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="712">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1240" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderBox.cpp">
   <explanation>
   function or method: WebCore::RenderBox::computeRectForRepaint
   line-by-line trace: (1154,take the True branch),(1156,take the True branch),(1156,cmp_null_aux of variable `repaintContainer'),(1173,take the True branch),1174,(1176,take the False branch),1179,1180,(1181,take the False branch),1184,1185,(1187,take the False branch),(1190,take the False branch),(1202,take the True branch),(1202,take the True branch),1203,1204,1206,1207,(1210,take the True branch),(1210,take the False branch),(1212,take the False branch),(1222,take the False branch),1236,(1238,take the True branch),(1240,deref of variable `repaintContainer')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `repaintContainer' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="713">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="704" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderInline.cpp">
   <explanation>
   function or method: WebCore::RenderInline::computeRectForRepaint
   line-by-line trace: (643,take the True branch),(645,take the True branch),(645,cmp_null_aux of variable `repaintContainer'),(656,take the False branch),659,660,(661,take the False branch),664,(666,take the False branch),(676,take the True branch),(676,take the True branch),681,(686,take the True branch),687,692,694,695,696,(697,take the False branch),(702,take the True branch),(704,deref of variable `repaintContainer')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `repaintContainer' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="714">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="762" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderInline.cpp">
   <explanation>
   function or method: WebCore::RenderInline::mapLocalToContainer
   line-by-line trace: (730,take the False branch),(733,take the True branch),(734,take the True branch),(734,cmp_null_aux of variable `repaintContainer'),744,745,(746,take the False branch),749,(751,take the True branch),(751,take the True branch),(752,take the False branch),(757,take the True branch),(759,take the True branch),(762,deref of variable `repaintContainer')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `repaintContainer' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="715">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1137" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderLayer.cpp">
   <explanation>
   function or method: WebCore::RenderLayer::convertToLayerCoords
   line-by-line trace: (1062,take the False branch),1065,(1066,take the True branch),(1066,cmp_null_aux of variable `ancestorLayer'),(1066,take the False branch),(1075,take the False branch),1109,(1110,take the False branch),(1110,take the True branch),1112,1113,(1114,take the True branch),(1115,take the True branch),1116,1123,(1126,take the True branch),1129,1131,1132,1133,1135,1136,(1137,deref of variable `ancestorLayer')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ancestorLayer' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="716">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="69" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/style/StyleInheritedData.cpp">
   <explanation>
   function or method: WebCore::cursorDataEquivalent
   line-by-line trace: (65,take the False branch),(67,take the True branch),(67,cmp_nonnull_aux of variable `c2'),(67,cmp_null of variable `c2'),(67,take the True branch),(67,cmp_null_aux of variable `c2'),(69,deref of variable `c2')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `c2' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="717">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="58" path="chrome-5.0.375.70/third_party/WebKit/WebCore/xml/XSLTExtensions.cpp">
   <explanation>
   function or method: WebCore::exsltNodeSetFunction
   line-by-line trace: 53,54,55,(57,take the True branch),(58,user_error_fun of function `xmlXPatherror'),(58,cmp_nonnull_aux of variable `ctxt'),(58,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ctxt' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="718">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2120" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv.c">
   <explanation>
   function or method: ucnv_convertEx_4_2
   line-by-line trace: 2049,2050,2051,2052,2053,2055,2056,2057,(2060,take the False branch),(2060,take the False branch),2066,2065,(2064,take the False branch),(2064,take the False branch),(2065,take the False branch),(2065,take the False branch),(2066,take the False branch),(2066,take the False branch),(2066,take the False branch),2072,2073,(2074,take the True branch),(2074,take the False branch),(2074,take the False branch),(2084,take the True branch),(2084,take the False branch),(2085,take the True branch),(2085,take the False branch),(2091,take the True branch),(2092,take the False branch),2099,(2100,write of variable `pivotSource'),2101,2102,(2112,take the False branch),(2117,take the True branch),2118,2119,(2120,deref of variable `pivotSource')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `pivotSource' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="719">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2120" path="chrome-5.0.375.70/third_party/icu/source/common/ucnv.c">
   <explanation>
   function or method: ucnv_convertEx_4_2
   line-by-line trace: 2049,2050,2051,2052,2053,2055,2056,2057,(2060,take the False branch),(2060,take the False branch),2066,2065,(2064,take the False branch),(2064,take the False branch),(2065,take the False branch),(2065,take the False branch),(2066,take the False branch),(2066,take the False branch),(2066,take the False branch),2072,2073,(2074,take the True branch),(2074,take the False branch),(2074,take the False branch),(2084,take the True branch),(2084,take the False branch),(2085,take the True branch),(2085,take the False branch),(2091,take the True branch),(2092,take the False branch),2099,2100,(2101,write of variable `pivotTarget'),2102,(2112,take the False branch),(2117,take the True branch),2118,2119,(2120,deref of variable `pivotTarget')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `pivotTarget' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="720">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2395" path="chrome-5.0.375.70/third_party/icu/source/common/uloc.c">
   <explanation>
   function or method: uloc_getDisplayName_4_2
   line-by-line trace: 2332,2333,2334,2335,2336,2337,2338,2339,(2342,take the False branch),(2342,take the False branch),(2346,take the False branch),(2346,take the True branch),(2346,cmp_null_aux of variable `dest'),2357,2360,(2362,take the False branch),(2374,take the True branch),2376,(2380,take the True branch),2381,2382,2381,2389,2390,(2392,take the True branch),(2394,take the True branch),(2395,deref of variable `dest')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `dest' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="721">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1487" path="chrome-5.0.375.70/third_party/icu/source/common/uniset.cpp">
   <explanation>
   function or method: icu_4_2::UnicodeSet::serialize
   line-by-line trace: 1470,(1472,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(1472,take the False branch),(1476,take the False branch),(1476,take the True branch),(1476,cmp_null_aux of variable `dest'),1482,(1484,take the True branch),(1486,take the True branch),(1487,deref of variable `dest')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `dest' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="722">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1210" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::format
   line-by-line trace: 1178,1179,(1180,take the False branch),(1180,take the True branch),(1180,take the False branch),(1185,take the True branch),(1185,cmp_null_aux of variable `argumentNames'),1190,(1191,take the True branch),1193,1194,1195,(1196,take the False branch),(1209,take the True branch),(1210,deref of variable `argumentNames')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `argumentNames' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="723">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="481" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: ucol_safeClone_4_2
   line-by-line trace: 447,448,449,450,451,452,453,454,455,456,(458,take the False branch),(458,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(458,take the False branch),(461,take the True branch),(461,cmp_null_aux of variable `pBufferSize'),(461,take the False branch),(465,take the False branch),(471,take the False branch),(479,take the True branch),480,(481,deref of variable `pBufferSize')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `pBufferSize' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="724">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="4325" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: ucol_mergeSortkeys_4_2
   line-by-line trace: 4291,4292,4297,4296,(4295,take the False branch),(4295,take the False branch),(4295,take the False branch),(4295,take the False branch),(4296,take the False branch),(4296,take the False branch),(4296,take the False branch),(4296,take the True branch),(4296,take the False branch),(4297,take the False branch),(4297,take the True branch),(4297,cmp_null_aux of variable `dest'),(4307,take the True branch),4308,(4310,take the False branch),4314,(4315,take the False branch),(4321,take the True branch),(4321,take the True branch),(4323,take the True branch),4324,(4325,deref of variable `dest')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `dest' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="725">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="6591" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol.cpp">
   <explanation>
   function or method: ucol_nextSortKeyPart_4_2
   line-by-line trace: (5925,take the False branch),(5925,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(5925,take the False branch),5931,5930,(5929,take the False branch),(5929,take the False branch),(5930,take the False branch),(5931,take the False branch),(5931,take the False branch),(5941,take the False branch),5948,(5950,take the True branch),5952,5955,5957,5960,5964,5968,5970,(5971,take the True branch),(5972,take the True branch),5973,5987,(5988,take the True branch),5987,(5990,take the True branch),5992,5995,5996,5998,5999,6000,6001,6005,6010,6011,(6014,take the True branch),(6014,take the True branch),6015,6016,6017,(6018,user_error_fun of function `_Z9U_FAILURE10UErrorCode'),(6018,take the False branch),6039,(6043,take the True branch),(6045,take the True branch),(6045,take the True branch),(6045,take the True branch),6046,6066,6071,(6072,take the False branch),(6092,take the False branch),6099,6102,6105,6114,6115,6116,6117,(6118,take the False branch),(6124,take the True branch),(6124,take the True branch),6125,(6126,take the True branch),6127,6128,(6131,user_error_fun of function `_Z15ucol_IGetNextCEPK9UCollatorP11collIterateP10UErrorCode'),6132,(6133,take the True branch),6135,6136,6139,6140,6141,6142,6167,6171,(6172,take the True branch),(6173,take the True branch),6174,(6175,take the False branch),(6181,take the True branch),6182,(6183,take the True branch),6184,6185,(6188,user_error_fun of function `_Z15ucol_IGetNextCEPK9UCollatorP11collIterateP10UErrorCode'),6189,(6190,take the True branch),6192,6193,6196,6197,6198,6199,6210,6276,(6277,take the False branch),6370,6373,(6374,take the False branch),6426,6429,(6430,take the True branch),6431,(6432,take the False branch),(6438,take the True branch),6439,(6440,take the True branch),6441,6442,(6445,user_error_fun of function `_Z15ucol_IGetNextCEPK9UCollatorP11collIterateP10UErrorCode'),6446,(6447,take the True branch),6449,6451,6454,6455,6456,6457,6491,6500,6501,6503,(6504,take the False branch),6585,6588,6589,(6590,take the True branch),(6591,deref of variable `dest')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `dest' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="726">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="391" path="chrome-5.0.375.70/third_party/libxml/c14n.c">
   <explanation>
   function or method: xmlC14NStrEqual
   line-by-line trace: (387,take the False branch),(388,take the False branch),(389,cmp_null_aux of variable `str2'),390,(391,deref of variable `str2')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `str2' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="727">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="107" path="chrome-5.0.375.70/third_party/libxml/hash.c">
   <explanation>
   function or method: xmlHashComputeQKey
   line-by-line trace: 92,93,(95,take the True branch),96,(100,take the False branch),(106,cmp_nonnull_aux of variable `name'),(107,deref of variable `name')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `name' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="728">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2851" path="chrome-5.0.375.70/third_party/libxml/xmlschemas.c">
   <explanation>
   function or method: xmlSchemaPCustomAttrErr
   line-by-line trace: 2834,(2836,take the False branch),(2838,take the False branch),2842,(2843,cmp_null_aux of variable `attr'),2849,(2851,deref of variable `attr')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `attr' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="729">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2478" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathPopBoolean
   line-by-line trace: 2466,2467,2469,(2470,take the False branch),(2474,take the True branch),2475,(2478,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ctxt' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="730">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2505" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathPopNumber
   line-by-line trace: 2493,2494,2496,(2497,take the False branch),(2501,take the False branch),2504,(2505,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ctxt' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="731">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2532" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathPopString
   line-by-line trace: 2520,2521,2523,(2524,take the False branch),2528,(2530,take the False branch),(2532,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ctxt' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="732">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="8693" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNameFunction
   line-by-line trace: 8684,(8686,take the False branch),(8692,cmp_null_aux of variable `ctxt'),(8692,take the False branch),(8693,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ctxt' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="733">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="9000" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringFunction
   line-by-line trace: 8978,8979,8980,8981,(8983,take the True branch),(8984,cmp_null_aux of variable `ctxt'),(8984,take the False branch),(8986,take the False branch),(8992,take the False branch),(9000,deref of variable `ctxt')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ctxt' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="734">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="14100" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathRunStreamEval
   line-by-line trace: 14058,14059,14060,14061,14062,14063,14065,(14067,take the False branch),(14067,take the False branch),14069,(14070,take the False branch),(14072,take the True branch),14073,14074,(14075,take the False branch),14077,(14078,take the False branch),(14084,take the False branch),(14095,take the True branch),(14096,take the True branch),(14098,take the False branch),14100,14101,(14100,deref of variable `resultSeq')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `resultSeq' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="735">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="78" path="chrome-5.0.375.70/third_party/libxslt/libxslt/attrvt.c">
   <explanation>
   function or method: xsltNewAttrVT
   line-by-line trace: 64,66,(67,take the False branch),73,75,76,77,(78,deref of variable `style')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `style' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="736">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="1269" path="chrome-5.0.375.70/third_party/libxslt/libxslt/numbers.c">
   <explanation>
   function or method: xsltFormatNumberConversion
   line-by-line trace: 948,949,950,951,952,953,954,955,956,957,962,964,966,(968,take the False branch),973,974,987,(988,take the False branch),997,(998,take the False branch),1002,1003,1004,1005,1006,1007,1008,1009,1010,1012,1018,1019,(1020,take the True branch),1021,1022,1251,(1252,take the False branch),(1268,take the True branch),(1269,deref of variable `self')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `self' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="737">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="2320" path="chrome-5.0.375.70/third_party/libxslt/libxslt/preproc.c">
   <explanation>
   function or method: xsltStylePreCompute
   line-by-line trace: (2185,take the False branch),(2188,take the True branch),(2188,take the True branch),(2188,take the True branch),2189,(2191,take the False branch),(2194,take the False branch),(2198,take the False branch),(2201,take the False branch),(2204,take the False branch),(2207,take the False branch),(2210,take the False branch),(2213,take the False branch),(2216,take the False branch),(2219,take the False branch),(2222,take the False branch),(2232,take the False branch),(2235,take the False branch),(2238,take the False branch),(2242,take the False branch),(2245,take the False branch),(2248,take the False branch),(2251,take the False branch),(2254,take the False branch),(2258,take the False branch),(2262,take the False branch),(2266,take the False branch),(2269,take the False branch),(2272,take the False branch),(2275,take the False branch),(2278,take the False branch),2279,(2278,take the False branch),(2289,take the False branch),(2292,take the False branch),(2295,take the False branch),(2298,take the False branch),(2301,take the False branch),(2304,take the False branch),(2307,take the False branch),(2310,take the False branch),(2313,take the False branch),(2318,user_error_fun of function `xsltTransformError'),2319,2318,(2320,cmp_nonnull_aux of variable `style'),(2320,deref of variable `style')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `style' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="738">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="365" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltDecimalFormatGetByName
   line-by-line trace: 359,(361,take the False branch),(364,cmp_nonnull_aux of variable `style'),(365,deref of variable `style')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `style' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="739">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="5021" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltParseTemplateContent
   line-by-line trace: 4831,4837,4838,(4839,take the False branch),(4992,take the False branch),5005,(5006,take the False branch),5009,(5015,take the True branch),(5016,take the True branch),(5016,take the True branch),(5016,take the True branch),(5016,take the True branch),5017,(5019,user_error_fun of function `xsltTransformError'),(5021,cmp_nonnull_aux of variable `style'),(5021,deref of variable `style')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `style' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="740">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="962" path="chrome-5.0.375.70/third_party/sqlite/src/insert.c">
   <explanation>
   function or method: sqlite3Insert
   line-by-line trace: 441,442,443,444,445,446,447,448,449,450,451,452,453,454,455,456,457,458,459,460,461,464,465,466,467,468,469,470,471,472,475,476,477,480,481,(482,take the False branch),(482,take the False branch),488,489,(490,take the False branch),491,(492,take the False branch),495,496,497,498,(499,take the False branch),507,508,518,(524,take the False branch),(532,take the False branch),538,(539,take the False branch),(540,take the True branch),(541,take the True branch),(553,take the True branch),(553,take the False branch),563,(570,take the True branch),593,595,596,598,599,600,601,605,606,(607,take the False branch),(607,take the False branch),(607,take the False branch),610,611,612,614,616,617,618,619,(630,take the False branch),(630,take the True branch),631,(634,take the True branch),646,647,648,649,651,652,653,654,655,656,657,658,659,660,661,662,663,(685,take the True branch),(686,take the False branch),(690,take the True branch),(690,take the True branch),(690,take the False branch),(696,take the True branch),(696,take the False branch),(712,take the False branch),(743,take the True branch),(743,take the True branch),744,(749,take the True branch),750,751,(755,take the True branch),756,758,759,760,(761,take the False branch),(764,take the False branch),(770,take the True branch),780,781,799,800,801,(802,take the True branch),803,804,806,810,(811,take the False branch),(883,take the True branch),(884,take the True branch),886,(888,take the False branch),(920,take the True branch),921,926,931,(932,take the True branch),933,(934,take the False branch),(942,take the True branch),(943,take the True branch),944,945,946,(955,take the False branch),(955,take the False branch),(955,take the True branch),(955,take the False branch),(957,take the False branch),(959,take the False branch),(962,deref of variable `pList')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `pList' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="741">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="70" path="chrome-5.0.375.70/third_party/sqlite/src/prepare.c">
   <explanation>
   function or method: sqlite3InitCallback
   line-by-line trace: 55,56,57,59,60,61,62,(63,take the False branch),68,(69,cmp_null_aux of variable `argv'),(70,deref of variable `argv')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `argv' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="742">
  <name>
   PTR-param-unchk-some
  </name>
  <location line="3630" path="chrome-5.0.375.70/third_party/sqlite/src/where.c">
   <explanation>
   function or method: sqlite3WhereBegin
   line-by-line trace: 3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,(3432,take the False branch),3444,3445,3446,3447,3448,3446,(3451,take the False branch),3454,3455,3456,3457,3458,3459,3460,3465,3466,3467,3468,(3473,take the True branch),(3473,take the False branch),(3473,take the True branch),3474,3475,3494,(3495,take the False branch),3519,(3520,take the False branch),3539,3540,3541,3542,(3544,take the True branch),3545,3546,3547,3548,3549,3550,3552,3553,(3587,take the False branch),3625,3626,(3629,take the True branch),(3630,deref of variable `ppOrderBy')
   </explanation>
  </location>
  <grade severity="3" probability="0.4"/>
  <output>
   <textoutput>
   Parameter `ppOrderBy' is not checked against NULL before it is dereferenced on some paths, but on other paths it is.
   </textoutput>
  </output>
 </weakness>
 <weakness id="743">
  <name>
   RED-case-reach
  </name>
  <location line="58" path="chrome-5.0.375.70/chrome/browser/sync/engine/process_updates_command.cc">
   <explanation>
   function or method: browser_sync::ProcessUpdatesCommand::ModelChangingExecuteImpl
   line-by-line trace: 38,39,38,(40,take the False branch),45,47,48,49,50,(49,take the True branch),52,(54,take the False branch),56,57,(58,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="744">
  <name>
   RED-case-reach
  </name>
  <location line="255" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/unicode/UTF8.cpp">
   <explanation>
   function or method: WTF::Unicode::convertUTF8ToUTF16
   line-by-line trace: 238,239,240,(241,take the True branch),242,243,(244,take the False branch),(249,take the False branch),254,(255,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="745">
  <name>
   RED-case-reach
  </name>
  <location line="256" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/unicode/UTF8.cpp">
   <explanation>
   function or method: WTF::Unicode::convertUTF8ToUTF16
   line-by-line trace: 238,239,240,(241,take the True branch),242,243,(244,take the False branch),(249,take the False branch),254,255,(256,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="746">
  <name>
   RED-case-reach
  </name>
  <location line="762" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/TextResourceDecoder.cpp">
   <explanation>
   function or method: WebCore::TextResourceDecoder::detectJapaneseEncoding
   line-by-line trace: 751,(762,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="747">
  <name>
   RED-case-reach
  </name>
  <location line="763" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/TextResourceDecoder.cpp">
   <explanation>
   function or method: WebCore::TextResourceDecoder::detectJapaneseEncoding
   line-by-line trace: 751,(763,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="748">
  <name>
   RED-case-reach
  </name>
  <location line="1526" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1526,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="749">
  <name>
   RED-case-reach
  </name>
  <location line="1530" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1530,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="750">
  <name>
   RED-case-reach
  </name>
  <location line="1534" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,1530,1531,1533,(1534,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="751">
  <name>
   RED-case-reach
  </name>
  <location line="1537" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,1530,1531,1533,(1537,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="752">
  <name>
   RED-case-reach
  </name>
  <location line="1540" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,1530,1531,1533,(1540,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="753">
  <name>
   RED-case-reach
  </name>
  <location line="1543" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,1530,1531,1533,(1543,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="754">
  <name>
   RED-case-reach
  </name>
  <location line="1557" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1557,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="755">
  <name>
   RED-case-reach
  </name>
  <location line="1558" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,1557,(1558,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="756">
  <name>
   RED-case-reach
  </name>
  <location line="1576" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1576,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="757">
  <name>
   RED-case-reach
  </name>
  <location line="1582" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1582,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="758">
  <name>
   RED-case-reach
  </name>
  <location line="1586" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1586,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="759">
  <name>
   RED-case-reach
  </name>
  <location line="1590" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1590,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="760">
  <name>
   RED-case-reach
  </name>
  <location line="1594" path="chrome-5.0.375.70/third_party/icu/source/i18n/msgfmt.cpp">
   <explanation>
   function or method: icu_4_2::MessageFormat::makeFormat
   line-by-line trace: (1492,take the False branch),1497,1498,(1499,take the True branch),(1500,take the True branch),(1500,take the False branch),1504,1505,(1507,take the True branch),(1508,take the False branch),1512,1517,1518,1519,1520,1521,1522,1524,(1594,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="761">
  <name>
   RED-case-reach
  </name>
  <location line="876" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_read_body
   line-by-line trace: 862,(864,take the True branch),865,(876,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="762">
  <name>
   RED-case-reach
  </name>
  <location line="405" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/socketadapters.cc">
   <explanation>
   function or method: talk_base::AsyncHttpsProxySocket::ProcessLine
   line-by-line trace: (317,take the True branch),(319,take the False branch),(359,take the False branch),382,(381,take the True branch),(382,take the True branch),383,384,(405,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="763">
  <name>
   RED-case-reach
  </name>
  <location line="1382" path="chrome-5.0.375.70/v8/src/spaces.cc">
   <explanation>
   function or method: v8::internal::ReportCodeKindStatistics
   line-by-line trace: 1366,1372,2628,(1372,take the True branch),1373,(1382,a case label)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Switch case is unreachable, given the range of the switch condition.
   </textoutput>
  </output>
 </weakness>
 <weakness id="764">
  <name>
   RED-cmp-always
  </name>
  <location line="854" path="chrome-5.0.375.70/base/string_util.cc">
   <explanation>
   function or method: GetByteDisplayUnits
   line-by-line trace: 836,(843,take the False branch),848,(849,take the True branch),(850,take the True branch),851,(854,take the True branch),(854,integer constant 3)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="765">
  <name>
   RED-cmp-always
  </name>
  <location line="151" path="chrome-5.0.375.70/base/third_party/xdg_mime/xdgmimecache.c">
   <explanation>
   function or method: _xdg_mime_cache_new_from_file
   line-by-line trace: 115,118,119,120,123,(125,take the False branch),(128,take the False branch),(128,take the True branch),129,150,(151,subtraction of of 0 and 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="766">
  <name>
   RED-cmp-always
  </name>
  <location line="576" path="chrome-5.0.375.70/chrome/browser/automation/automation_provider.cc">
   <explanation>
   function or method: AutomationProvider::ActivateTab
   line-by-line trace: 573,(574,take the True branch),(574,take the True branch),575,(576,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="767">
  <name>
   RED-cmp-always
  </name>
  <location line="911" path="chrome-5.0.375.70/chrome/browser/gtk/tabs/tab_strip_gtk.cc">
   <explanation>
   function or method: TabStripGtk::GetWidgetForViewID
   line-by-line trace: (906,take the True branch),(907,take the False branch),(909,take the True branch),(909,take the True branch),910,(911,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="768">
  <name>
   RED-cmp-always
  </name>
  <location line="175" path="chrome-5.0.375.70/chrome/browser/importer/importer_list.cc">
   <explanation>
   function or method: ImporterList::DetectFirefoxProfiles
   line-by-line trace: 122,123,124,126,127,128,(129,take the True branch),132,163,169,170,171,(175,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="769">
  <name>
   RED-cmp-always
  </name>
  <location line="175" path="chrome-5.0.375.70/chrome/browser/importer/importer_list.cc">
   <explanation>
   function or method: ImporterList::DetectFirefoxProfiles
   line-by-line trace: 122,123,124,126,127,128,(129,take the True branch),132,163,169,170,171,(175,take the True branch),(175,integer constant 3)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="770">
  <name>
   RED-cmp-always
  </name>
  <location line="124" path="chrome-5.0.375.70/chrome/browser/metrics/metrics_log.cc">
   <explanation>
   function or method: MetricsLog::CreateHash
   line-by-line trace: 112,113,114,116,117,119,123,(124,sizeof `reverse_uint64')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="771">
  <name>
   RED-cmp-always
  </name>
  <location line="250" path="chrome-5.0.375.70/chrome/browser/ssl/ssl_error_info.cc">
   <explanation>
   function or method: SSLErrorInfo::GetErrorsForCertStatus
   line-by-line trace: 229,240,(250,sizeof a deref of a function call to function `_Z15ArraySizeHelperIN12SSLErrorInfo9ErrorTypeELj8EERAT0__cRAT0__KT_')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="772">
  <name>
   RED-cmp-always
  </name>
  <location line="374" path="chrome-5.0.375.70/chrome/browser/sync/syncable/directory_backing_store.cc">
   <explanation>
   function or method: syncable::DirectoryBackingStore::InitializeTables
   line-by-line trace: 327,(328,take the False branch),331,332,(336,take the True branch),(337,take the True branch),338,(341,take the False branch),(346,take the True branch),(347,take the True branch),348,(352,take the True branch),(353,take the True branch),354,(360,take the False branch),(366,take the True branch),(367,take the False branch),372,(374,reference to variable `last_result')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="773">
  <name>
   RED-cmp-always
  </name>
  <location line="381" path="chrome-5.0.375.70/chrome/browser/sync/syncable/directory_backing_store.cc">
   <explanation>
   function or method: syncable::DirectoryBackingStore::InitializeTables
   line-by-line trace: 327,(328,take the False branch),331,332,(336,take the True branch),(337,take the True branch),338,(341,take the False branch),(346,take the True branch),(347,take the True branch),348,(352,take the True branch),(353,take the True branch),354,(360,take the False branch),(366,take the True branch),(367,take the False branch),372,(374,take the True branch),375,(376,take the True branch),377,(381,reference to variable `last_result')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="774">
  <name>
   RED-cmp-always
  </name>
  <location line="1249" path="chrome-5.0.375.70/chrome/renderer/webplugin_delegate_pepper.cc">
   <explanation>
   function or method: _GLOBAL__N__28_webplugin_delegate_pepper_cc_79365114::BuildCharEvent
   line-by-line trace: 1245,1247,(1249,sizeof a field of `key_event')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="775">
  <name>
   RED-cmp-always
  </name>
  <location line="1250" path="chrome-5.0.375.70/chrome/renderer/webplugin_delegate_pepper.cc">
   <explanation>
   function or method: _GLOBAL__N__28_webplugin_delegate_pepper_cc_79365114::BuildCharEvent
   line-by-line trace: 1245,1247,(1249,take the True branch),(1250,sizeof a field of `key_event')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="776">
  <name>
   RED-cmp-always
  </name>
  <location line="175" path="chrome-5.0.375.70/googleurl/src/url_canon_icu.cc">
   <explanation>
   function or method: url_canon::ReadUTFChar
   line-by-line trace: 166,(167,take the False branch),168,172,(175,take the False branch),(175,take the True branch),(175,take the True branch),(175,take the True branch),(175,take the False branch),(175,take the True branch),(175,integer constant 1114111)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="777">
  <name>
   RED-cmp-always
  </name>
  <location line="20" path="chrome-5.0.375.70/native_client/src/shared/platform/nacl_sync_checked.c">
   <explanation>
   function or method: NaClXMutexLock
   line-by-line trace: 18,(20,function `NaClMutexLock')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="778">
  <name>
   RED-cmp-always
  </name>
  <location line="29" path="chrome-5.0.375.70/native_client/src/shared/platform/nacl_sync_checked.c">
   <explanation>
   function or method: NaClXMutexTryLock
   line-by-line trace: 27,(29,function `NaClMutexUnlock')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="779">
  <name>
   RED-cmp-always
  </name>
  <location line="41" path="chrome-5.0.375.70/native_client/src/shared/platform/nacl_sync_checked.c">
   <explanation>
   function or method: NaClXMutexUnlock
   line-by-line trace: 39,(41,function `NaClMutexUnlock')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="780">
  <name>
   RED-cmp-always
  </name>
  <location line="50" path="chrome-5.0.375.70/native_client/src/shared/platform/nacl_sync_checked.c">
   <explanation>
   function or method: NaClXCondVarSignal
   line-by-line trace: 48,(50,function `NaClCondVarSignal')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="781">
  <name>
   RED-cmp-always
  </name>
  <location line="59" path="chrome-5.0.375.70/native_client/src/shared/platform/nacl_sync_checked.c">
   <explanation>
   function or method: NaClXCondVarBroadcast
   line-by-line trace: 57,(59,function `NaClCondVarBroadcast')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="782">
  <name>
   RED-cmp-always
  </name>
  <location line="69" path="chrome-5.0.375.70/native_client/src/shared/platform/nacl_sync_checked.c">
   <explanation>
   function or method: NaClXCondVarWait
   line-by-line trace: 67,(69,function `NaClCondVarWait')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="783">
  <name>
   RED-cmp-always
  </name>
  <location line="333" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: BoolGet
   line-by-line trace: (333,take the True branch),(333,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="784">
  <name>
   RED-cmp-always
  </name>
  <location line="334" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: DoubleGet
   line-by-line trace: (334,take the True branch),(334,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="785">
  <name>
   RED-cmp-always
  </name>
  <location line="335" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: IntGet
   line-by-line trace: (335,take the True branch),(335,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="786">
  <name>
   RED-cmp-always
  </name>
  <location line="417" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: CharArrGet
   line-by-line trace: (417,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="787">
  <name>
   RED-cmp-always
  </name>
  <location line="418" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: DoubleArrGet
   line-by-line trace: (418,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="788">
  <name>
   RED-cmp-always
  </name>
  <location line="419" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: IntArrGet
   line-by-line trace: (419,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="789">
  <name>
   RED-cmp-always
  </name>
  <location line="485" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: StringGet
   line-by-line trace: 480,482,483,(484,take the True branch),(485,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="790">
  <name>
   RED-cmp-always
  </name>
  <location line="605" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: ArgsGet
   line-by-line trace: 601,602,603,(605,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="791">
  <name>
   RED-cmp-always
  </name>
  <location line="656" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: ArgsGet
   line-by-line trace: 601,602,603,(605,take the False branch),(608,take the False branch),(612,take the False branch),(646,take the False branch),649,(652,take the True branch),653,654,(656,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="792">
  <name>
   RED-cmp-always
  </name>
  <location line="810" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: NaClSrpcRpcGet
   line-by-line trace: 803,804,805,806,807,(809,take the False branch),(809,take the True branch),(810,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="793">
  <name>
   RED-cmp-always
  </name>
  <location line="819" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: NaClSrpcRpcGet
   line-by-line trace: 803,804,805,806,807,(809,take the False branch),(809,take the True branch),(810,take the False branch),814,(819,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="794">
  <name>
   RED-cmp-always
  </name>
  <location line="824" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: NaClSrpcRpcGet
   line-by-line trace: 803,804,805,806,807,(809,take the False branch),(809,take the True branch),(810,take the False branch),814,(819,take the False branch),823,(824,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="795">
  <name>
   RED-cmp-always
  </name>
  <location line="829" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: NaClSrpcRpcGet
   line-by-line trace: 803,804,805,806,807,(809,take the False branch),(809,take the True branch),(810,take the False branch),814,(819,take the False branch),823,(824,take the False branch),828,(829,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="796">
  <name>
   RED-cmp-always
  </name>
  <location line="836" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_serialize.c">
   <explanation>
   function or method: NaClSrpcRpcGet
   line-by-line trace: 803,804,805,806,807,(809,take the False branch),(809,take the True branch),(810,take the False branch),814,(819,take the False branch),823,(824,take the False branch),828,(829,take the False branch),833,(834,take the True branch),(836,a function call to function `__NaClSrpcImcRead')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="797">
  <name>
   RED-cmp-always
  </name>
  <location line="570" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_universal.c">
   <explanation>
   function or method: DumpDouble
   line-by-line trace: (570,take the False branch),(570,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="798">
  <name>
   RED-cmp-always
  </name>
  <location line="16" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/arch/x86_32/nacl_tls_32.c">
   <explanation>
   function or method: NaClThreadStartupCheck
   line-by-line trace: (16,integer constant 64)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="799">
  <name>
   RED-cmp-always
  </name>
  <location line="74" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/sel_ldr_standard.c">
   <explanation>
   function or method: NaClAppLoadFile
   line-by-line trace: 47,48,49,50,51,52,(55,take the False branch),60,63,(64,take the True branch),65,71,(74,reference to variable `check_abi')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="800">
  <name>
   RED-cmp-always
  </name>
  <location line="1180" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/ncdecode_tablegen.c">
   <explanation>
   function or method: NaClInitInstTables
   line-by-line trace: 1174,1175,1176,(1180,multiplication of sizeof a  and 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="801">
  <name>
   RED-cmp-always
  </name>
  <location line="1181" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/ncdecode_tablegen.c">
   <explanation>
   function or method: NaClInitInstTables
   line-by-line trace: 1174,1175,1176,(1180,take the True branch),(1181,multiplication of sizeof a  and 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="802">
  <name>
   RED-cmp-always
  </name>
  <location line="1182" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/ncdecode_tablegen.c">
   <explanation>
   function or method: NaClInitInstTables
   line-by-line trace: 1174,1175,1176,(1180,take the True branch),(1181,take the True branch),(1182,multiplication of sizeof a  and 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="803">
  <name>
   RED-cmp-always
  </name>
  <location line="238" path="chrome-5.0.375.70/net/base/x509_certificate_nss.cc">
   <explanation>
   function or method: net::_GLOBAL__N__23_x509_certificate_nss_cc_2aa1322d::ParsePrincipal
   line-by-line trace: 227,233,(238,sizeof a deref of a function call to function `_Z15ArraySizeHelperIPSt6vectorISsSaISsEELj4EERAT0__cRAT0__T_')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="804">
  <name>
   RED-cmp-always
  </name>
  <location line="206" path="chrome-5.0.375.70/net/disk_cache/block_files.cc">
   <explanation>
   function or method: disk_cache::BlockFiles::Name
   line-by-line trace: (206,take the False branch),(206,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="805">
  <name>
   RED-cmp-always
  </name>
  <location line="244" path="chrome-5.0.375.70/net/disk_cache/stats.cc">
   <explanation>
   function or method: disk_cache::Stats::OnEvent
   line-by-line trace: (244,take the False branch),(244,integer constant 20)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="806">
  <name>
   RED-cmp-always
  </name>
  <location line="249" path="chrome-5.0.375.70/net/disk_cache/stats.cc">
   <explanation>
   function or method: disk_cache::Stats::SetCounter
   line-by-line trace: (249,take the False branch),(249,integer constant 20)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="807">
  <name>
   RED-cmp-always
  </name>
  <location line="254" path="chrome-5.0.375.70/net/disk_cache/stats.cc">
   <explanation>
   function or method: disk_cache::Stats::GetCounter
   line-by-line trace: (254,take the False branch),(254,integer constant 20)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="808">
  <name>
   RED-cmp-always
  </name>
  <location line="1282" path="chrome-5.0.375.70/net/ftp/ftp_network_transaction.cc">
   <explanation>
   function or method: net::FtpNetworkTransaction::RecordDataConnectionError
   line-by-line trace: 1246,1247,1266,1267,1268,1278,1280,(1282,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="809">
  <name>
   RED-cmp-always
  </name>
  <location line="1282" path="chrome-5.0.375.70/net/ftp/ftp_network_transaction.cc">
   <explanation>
   function or method: net::FtpNetworkTransaction::RecordDataConnectionError
   line-by-line trace: 1246,1247,1266,1267,1268,1278,1280,(1282,take the True branch),(1282,integer constant 21)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="810">
  <name>
   RED-cmp-always
  </name>
  <location line="338" path="chrome-5.0.375.70/net/socket/tcp_client_socket_libevent.cc">
   <explanation>
   function or method: net::TCPClientSocketLibevent::SetReceiveBufferSize
   line-by-line trace: 334,335,334,(337,take the False branch),(338,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="811">
  <name>
   RED-cmp-always
  </name>
  <location line="346" path="chrome-5.0.375.70/net/socket/tcp_client_socket_libevent.cc">
   <explanation>
   function or method: net::TCPClientSocketLibevent::SetSendBufferSize
   line-by-line trace: 342,343,342,(345,take the False branch),(346,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="812">
  <name>
   RED-cmp-always
  </name>
  <location line="574" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3con.c">
   <explanation>
   function or method: SSL_AtomicIncrementLong
   line-by-line trace: (574,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="813">
  <name>
   RED-cmp-always
  </name>
  <location line="3442" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslcon.c">
   <explanation>
   function or method: ssl2_RestartHandshakeAfterServerCert
   line-by-line trace: 3429,(3431,take the False branch),3439,3441,(3442,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="814">
  <name>
   RED-cmp-always
  </name>
  <location line="1333" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsnce.c">
   <explanation>
   function or method: ssl_ConfigServerSessionIDCacheInstanceWithOpt
   line-by-line trace: 1331,(1333,integer constant 224)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="815">
  <name>
   RED-cmp-always
  </name>
  <location line="1334" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsnce.c">
   <explanation>
   function or method: ssl_ConfigServerSessionIDCacheInstanceWithOpt
   line-by-line trace: 1331,(1333,take the False branch),(1334,integer constant 4096)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="816">
  <name>
   RED-cmp-always
  </name>
  <location line="1335" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslsnce.c">
   <explanation>
   function or method: ssl_ConfigServerSessionIDCacheInstanceWithOpt
   line-by-line trace: 1331,(1333,take the False branch),(1334,take the True branch),(1335,integer constant 1072)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="817">
  <name>
   RED-cmp-always
  </name>
  <location line="1624" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: 573,574,575,576,577,578,579,580,581,582,583,584,586,587,588,600,601,602,603,(610,take the True branch),614,615,616,617,618,619,620,621,622,623,(627,take the True branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),634,1588,1589,1590,(1599,take the True branch),(1603,take the True branch),(1603,take the True branch),(1603,take the True branch),1604,1608,1609,(1613,take the False branch),(1624,take the True branch),(1624,integer constant 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="818">
  <name>
   RED-cmp-always
  </name>
  <location line="2061" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="819">
  <name>
   RED-cmp-always
  </name>
  <location line="2134" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,take the True branch),2062,2122,2123,2124,2125,2126,(2131,take the True branch),(2131,take the True branch),2133,(2134,take the True branch),(2134,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="820">
  <name>
   RED-cmp-always
  </name>
  <location line="2137" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,take the True branch),2062,2122,2123,2124,2125,2126,(2131,take the True branch),(2131,take the True branch),2133,(2134,take the True branch),(2134,take the True branch),2135,2136,(2137,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="821">
  <name>
   RED-cmp-always
  </name>
  <location line="2340" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,take the True branch),2062,2122,2123,2124,2125,2126,(2131,take the False branch),2176,2177,2178,2179,(2180,take the True branch),2181,(2183,take the True branch),2181,2186,2187,2188,(2190,take the True branch),(2190,take the True branch),(2191,take the True branch),2192,2193,2194,(2196,take the False branch),2207,(2208,take the True branch),2209,2213,2216,(2214,take the False branch),(2233,take the True branch),(2233,take the True branch),2234,(2239,take the True branch),2240,2241,2242,2243,(2250,take the True branch),2251,(2252,take the True branch),2253,(2254,take the True branch),(2255,take the True branch),2256,2257,(2258,take the True branch),2259,2260,(2264,take the False branch),2332,2333,(2334,take the True branch),(2334,take the False branch),(2340,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="822">
  <name>
   RED-cmp-always
  </name>
  <location line="777" path="chrome-5.0.375.70/third_party/WebKit/WebCore/css/CSSComputedStyleDeclaration.cpp">
   <explanation>
   function or method: WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue
   line-by-line trace: 655,(656,take the False branch),(660,take the True branch),661,663,665,(666,take the True branch),(666,take the True branch),(666,take the True branch),667,(670,take the False branch),673,774,775,(776,take the True branch),(776,take the False branch),(777,integer constant 5)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="823">
  <name>
   RED-cmp-always
  </name>
  <location line="1047" path="chrome-5.0.375.70/third_party/WebKit/WebCore/css/CSSComputedStyleDeclaration.cpp">
   <explanation>
   function or method: WebCore::CSSComputedStyleDeclaration::getPropertyCSSValue
   line-by-line trace: 655,(656,take the False branch),(660,take the True branch),661,663,665,(666,take the True branch),(666,take the True branch),(666,take the True branch),667,(670,take the False branch),673,1044,1045,(1046,take the False branch),(1047,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="824">
  <name>
   RED-cmp-always
  </name>
  <location line="428" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/StyledElement.cpp">
   <explanation>
   function or method: WebCore::MappedAttributeHash::hash
   line-by-line trace: 418,419,421,423,424,425,426,427,(428,integer constant 4)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="825">
  <name>
   RED-cmp-always
  </name>
  <location line="442" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/StyledElement.cpp">
   <explanation>
   function or method: WebCore::MappedAttributeHash::hash
   line-by-line trace: 418,419,421,423,424,425,426,427,(428,take the True branch),(428,take the True branch),(428,take the False branch),(429,take the False branch),437,438,439,440,441,(442,integer constant 4)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="826">
  <name>
   RED-cmp-always
  </name>
  <location line="1011" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/FrameLoader.cpp">
   <explanation>
   function or method: WebCore::FrameLoader::startIconLoader
   line-by-line trace: (997,take the False branch),(1000,take the False branch),(1000,take the False branch),1003,1004,(1005,take the False branch),(1009,take the True branch),(1009,take the True branch),1010,(1011,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="827">
  <name>
   RED-cmp-always
  </name>
  <location line="155" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/StringTruncator.cpp">
   <explanation>
   function or method: WebCore::truncateString
   line-by-line trace: (104,take the False branch),(107,take the False branch),109,111,112,113,114,(116,take the False branch),120,121,122,125,(126,take the False branch),129,130,132,133,(135,take the True branch),136,137,(140,take the True branch),(141,take the False branch),(142,take the True branch),(142,take the False branch),144,145,144,146,(148,take the True branch),149,(154,take the False branch),(155,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="828">
  <name>
   RED-cmp-always
  </name>
  <location line="80" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/chromium/FontLinux.cpp">
   <explanation>
   function or method: WebCore::Font::drawGlyphs
   line-by-line trace: (80,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="829">
  <name>
   RED-cmp-always
  </name>
  <location line="182" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/chromium/SimpleFontDataLinux.cpp">
   <explanation>
   function or method: WebCore::SimpleFontData::platformWidthForGlyph
   line-by-line trace: (182,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="830">
  <name>
   RED-cmp-always
  </name>
  <location line="676" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/AutoTableLayout.cpp">
   <explanation>
   function or method: WebCore::AutoTableLayout::layout
   line-by-line trace: 499,500,501,(503,take the False branch),(508,take the True branch),509,511,512,513,514,515,516,517,518,519,520,(523,take the False branch),(558,take the True branch),(558,take the True branch),(559,take the False branch),(567,take the False branch),(585,take the True branch),(586,take the False branch),(596,take the True branch),(597,take the False branch),(609,take the False branch),(623,take the False branch),(637,take the True branch),(637,take the True branch),(637,take the True branch),(639,take the True branch),640,(641,take the True branch),642,643,644,645,(646,take the False branch),(646,take the True branch),(652,take the False branch),(669,take the True branch),(676,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="831">
  <name>
   RED-cmp-always
  </name>
  <location line="250" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListMarker.cpp">
   <explanation>
   function or method: WebCore::toArmenian
   line-by-line trace: (241,take the False branch),(241,take the False branch),244,245,247,248,(250,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="832">
  <name>
   RED-cmp-always
  </name>
  <location line="295" path="chrome-5.0.375.70/third_party/WebKit/WebCore/rendering/RenderListMarker.cpp">
   <explanation>
   function or method: WebCore::toGeorgian
   line-by-line trace: (256,take the False branch),(256,take the False branch),259,260,262,(264,take the False branch),(267,take the True branch),268,271,(274,take the False branch),(281,take the True branch),282,285,(288,take the False branch),(295,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="833">
  <name>
   RED-cmp-always
  </name>
  <location line="244" path="chrome-5.0.375.70/third_party/cld/encodings/compact_lang_det/ext_lang_enc.cc">
   <explanation>
   function or method: ExtLanguageName
   line-by-line trace: (236,take the False branch),(241,take the False branch),(244,reference to variable `lang')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="834">
  <name>
   RED-cmp-always
  </name>
  <location line="160" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/opt.c">
   <explanation>
   function or method: av_set_string3
   line-by-line trace: 111,112,(113,take the True branch),114,(115,take the False branch),(117,take the False branch),(117,take the False branch),(120,take the False branch),(143,take the True branch),144,145,146,147,148,149,150,(152,take the False branch),(152,take the False branch),(155,take the True branch),(155,take the True branch),(155,take the True branch),(155,take the False branch),157,159,(160,take the False branch),(160,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="835">
  <name>
   RED-cmp-always
  </name>
  <location line="91" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/simple_idct.c">
   <explanation>
   function or method: idctRowCondDC
   line-by-line trace: 61,65,(91,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="836">
  <name>
   RED-cmp-always
  </name>
  <location line="266" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/utils.c">
   <explanation>
   function or method: av_guess_codec
   line-by-line trace: (258,take the True branch),259,(266,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="837">
  <name>
   RED-cmp-always
  </name>
  <location line="481" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/utils.c">
   <explanation>
   function or method: ff_probe_input_buffer
   line-by-line trace: 465,466,467,(469,take the True branch),470,(477,take the False branch),(481,take the True branch),(481,take the True branch),(481,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="838">
  <name>
   RED-cmp-always
  </name>
  <location line="1203" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-shaper.cpp">
   <explanation>
   function or method: HB_FixupZeroWidth
   line-by-line trace: 1196,(1198,take the False branch),(1201,take the True branch),(1203,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="839">
  <name>
   RED-cmp-always
  </name>
  <location line="287" path="chrome-5.0.375.70/third_party/icu/source/common/dictbe.cpp">
   <explanation>
   function or method: icu_4_2::ThaiBreakEngine::divideUpDictionaryRange
   line-by-line trace: (253,take the False branch),257,258,259,260,261,262,264,(266,take the True branch),(266,take the True branch),267,270,(273,take the False branch),(279,take the True branch),(281,take the False branch),284,285,(286,take the True branch),(287,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="840">
  <name>
   RED-cmp-always
  </name>
  <location line="721" path="chrome-5.0.375.70/third_party/icu/source/common/ushape.c">
   <explanation>
   function or method: handleGeneratedSpaces
   line-by-line trace: 713,714,715,717,718,719,(721,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="841">
  <name>
   RED-cmp-always
  </name>
  <location line="765" path="chrome-5.0.375.70/third_party/icu/source/common/ushape.c">
   <explanation>
   function or method: handleGeneratedSpaces
   line-by-line trace: 713,714,715,717,718,719,(721,take the True branch),(722,take the True branch),723,(725,take the True branch),726,(730,take the True branch),731,(733,take the False branch),738,740,(741,take the False branch),(753,take the False branch),759,760,763,(765,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="842">
  <name>
   RED-cmp-always
  </name>
  <location line="785" path="chrome-5.0.375.70/third_party/icu/source/common/ushape.c">
   <explanation>
   function or method: handleGeneratedSpaces
   line-by-line trace: 713,714,715,717,718,719,(721,take the True branch),(722,take the True branch),723,(725,take the True branch),726,(730,take the True branch),731,(733,take the False branch),738,740,(741,take the False branch),(753,take the False branch),759,760,763,(765,take the False branch),(771,take the True branch),773,(774,take the False branch),780,782,783,(785,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="843">
  <name>
   RED-cmp-always
  </name>
  <location line="832" path="chrome-5.0.375.70/third_party/icu/source/common/ushape.c">
   <explanation>
   function or method: handleGeneratedSpaces
   line-by-line trace: 713,714,715,717,718,719,(721,take the True branch),(722,take the True branch),723,(725,take the True branch),726,(730,take the True branch),731,(733,take the False branch),738,740,(741,take the False branch),(753,take the False branch),759,760,763,(765,take the False branch),(771,take the True branch),773,(774,take the False branch),780,782,783,(785,take the False branch),(796,take the False branch),(796,take the True branch),797,(800,take the False branch),805,806,(807,take the False branch),(819,take the False branch),823,824,829,830,(832,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="844">
  <name>
   RED-cmp-always
  </name>
  <location line="195" path="chrome-5.0.375.70/third_party/icu/source/common/uvector.cpp">
   <explanation>
   function or method: icu_4_2::UVector::containsAll
   line-by-line trace: (194,take the True branch),(195,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="845">
  <name>
   RED-cmp-always
  </name>
  <location line="113" path="chrome-5.0.375.70/third_party/icu/source/common/uvectr32.cpp">
   <explanation>
   function or method: icu_4_2::UVector32::containsAll
   line-by-line trace: (112,take the True branch),(113,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="846">
  <name>
   RED-cmp-always
  </name>
  <location line="1728" path="chrome-5.0.375.70/third_party/icu/source/i18n/dtptngen.cpp">
   <explanation>
   function or method: icu_4_2::FormatParser::set
   line-by-line trace: 1713,1714,1715,1716,1718,1719,(1720,take the True branch),1722,1723,(1728,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="847">
  <name>
   RED-cmp-always
  </name>
  <location line="479" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_tok.cpp">
   <explanation>
   function or method: ucol_tok_getNextArgument_4_2
   line-by-line trace: 457,458,459,460,462,(464,take the False branch),(467,take the False branch),(471,take the True branch),472,(478,take the True branch),(479,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="848">
  <name>
   RED-cmp-always
  </name>
  <location line="499" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_tok.cpp">
   <explanation>
   function or method: ucol_tok_getNextArgument_4_2
   line-by-line trace: 457,458,459,460,462,(464,take the False branch),(467,take the False branch),(471,take the True branch),472,(478,take the False branch),489,(492,take the False branch),(497,take the True branch),(498,take the True branch),(499,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="849">
  <name>
   RED-cmp-always
  </name>
  <location line="555" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_tok.cpp">
   <explanation>
   function or method: ucol_uprv_tok_readOption
   line-by-line trace: 548,549,(551,take the False branch),(554,take the True branch),(555,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="850">
  <name>
   RED-cmp-always
  </name>
  <location line="610" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_tok.cpp">
   <explanation>
   function or method: ucol_uprv_tok_readAndSetOption
   line-by-line trace: 582,583,584,585,587,589,590,(591,take the False branch),(595,take the False branch),598,599,600,601,602,603,604,605,606,607,(608,take the True branch),(609,take the True branch),(610,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="851">
  <name>
   RED-cmp-always
  </name>
  <location line="629" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_tok.cpp">
   <explanation>
   function or method: ucol_uprv_tok_readAndSetOption
   line-by-line trace: 582,583,584,585,587,589,590,(591,take the False branch),(595,take the False branch),598,599,626,(627,take the True branch),(628,take the True branch),(629,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="852">
  <name>
   RED-cmp-always
  </name>
  <location line="646" path="chrome-5.0.375.70/third_party/icu/source/i18n/ucol_tok.cpp">
   <explanation>
   function or method: ucol_uprv_tok_readAndSetOption
   line-by-line trace: 582,583,584,585,587,589,590,(591,take the False branch),(595,take the False branch),598,599,643,644,(645,take the True branch),(646,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="853">
  <name>
   RED-cmp-always
  </name>
  <location line="2572" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_associate_new_request_with_connection
   line-by-line trace: 2570,2571,(2572,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="854">
  <name>
   RED-cmp-always
  </name>
  <location line="366" path="chrome-5.0.375.70/third_party/libxml/HTMLparser.c">
   <explanation>
   function or method: htmlCurrentChar
   line-by-line trace: 306,113,(306,take the False branch),(309,take the False branch),(313,take the True branch),325,326,327,329,(330,take the True branch),(331,take the True branch),332,(333,take the False branch),(335,take the False branch),362,363,364,(366,take the False branch),(366,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="855">
  <name>
   RED-cmp-always
  </name>
  <location line="2776" path="chrome-5.0.375.70/third_party/libxml/HTMLparser.c">
   <explanation>
   function or method: htmlParseCharData
   line-by-line trace: 2767,2768,2769,(2771,take the True branch),(2771,take the True branch),2772,2773,2774,(2773,take the False branch),(2773,take the True branch),(2774,take the False branch),(2774,take the True branch),(2775,take the True branch),(2776,take the False branch),(2776,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="856">
  <name>
   RED-cmp-always
  </name>
  <location line="2949" path="chrome-5.0.375.70/third_party/libxml/HTMLparser.c">
   <explanation>
   function or method: htmlParsePI
   line-by-line trace: 2900,2901,2902,2903,2904,2905,2906,(2908,take the True branch),(2908,take the True branch),(2908,take the True branch),2909,2910,2914,(2915,take the True branch),(2915,take the True branch),2921,(2922,take the True branch),(2923,take the True branch),(2923,take the False branch),2936,(2937,take the False branch),2942,(2943,take the True branch),(2943,take the False branch),(2943,take the True branch),(2943,take the False branch),(2943,take the False branch),2947,2948,(2949,take the False branch),(2949,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="857">
  <name>
   RED-cmp-always
  </name>
  <location line="3041" path="chrome-5.0.375.70/third_party/libxml/HTMLparser.c">
   <explanation>
   function or method: htmlParseComment
   line-by-line trace: 3011,3012,3013,3014,3015,3016,3017,3023,(3022,take the True branch),(3022,take the False branch),(3022,take the False branch),(3023,take the False branch),(3023,take the False branch),3025,3026,(3027,take the True branch),(3027,take the False branch),3028,3029,(3030,take the False branch),3035,(3036,take the True branch),3037,(3038,take the True branch),3039,3040,(3041,take the False branch),(3041,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="858">
  <name>
   RED-cmp-always
  </name>
  <location line="3071" path="chrome-5.0.375.70/third_party/libxml/HTMLparser.c">
   <explanation>
   function or method: htmlParseComment
   line-by-line trace: 3011,3012,3013,3014,3015,3016,3017,3023,(3022,take the True branch),(3022,take the False branch),(3022,take the False branch),(3023,take the False branch),(3023,take the False branch),3025,3026,(3027,take the True branch),(3027,take the False branch),3028,3029,(3030,take the False branch),3035,(3036,take the True branch),3037,(3038,take the True branch),3039,3040,(3041,take the True branch),(3041,take the True branch),(3041,take the False branch),(3041,take the False branch),(3041,take the True branch),3043,(3042,take the False branch),(3043,take the False branch),(3043,take the False branch),3070,(3071,take the False branch),(3071,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="859">
  <name>
   RED-cmp-always
  </name>
  <location line="3148" path="chrome-5.0.375.70/third_party/libxml/HTMLparser.c">
   <explanation>
   function or method: htmlParseCharRef
   line-by-line trace: 3098,(3100,take the False branch),(3100,take the False branch),(3106,take the False branch),(3126,take the False branch),3142,(3148,take the False branch),(3148,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="860">
  <name>
   RED-cmp-always
  </name>
  <location line="257" path="chrome-5.0.375.70/third_party/libxml/chvalid.c">
   <explanation>
   function or method: xmlIsChar
   line-by-line trace: (257,take the False branch),(257,reference to variable `ch')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="861">
  <name>
   RED-cmp-always
  </name>
  <location line="605" path="chrome-5.0.375.70/third_party/libxml/entities.c">
   <explanation>
   function or method: xmlEncodeEntitiesReentrant
   line-by-line trace: 499,500,501,502,503,(505,take the False branch),(506,take the True branch),507,512,513,(514,take the False branch),518,(520,take the True branch),(521,take the False branch),(531,take the False branch),(536,take the False branch),(541,take the False branch),548,(547,take the True branch),(547,take the False branch),(548,take the False branch),(548,take the False branch),(548,take the False branch),(553,take the True branch),(554,take the True branch),(554,take the False branch),(554,take the False branch),569,570,(572,take the False branch),(583,take the False branch),(588,take the True branch),589,590,591,592,593,594,(605,take the False branch),(605,take the False branch),(605,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="862">
  <name>
   RED-cmp-always
  </name>
  <location line="1960" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCharRef
   line-by-line trace: 1885,1886,1887,(1892,take the False branch),(1924,take the False branch),1952,(1960,take the False branch),(1960,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="863">
  <name>
   RED-cmp-always
  </name>
  <location line="2051" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseStringCharRef
   line-by-line trace: 1990,1991,1992,1993,(1995,take the False branch),(1995,take the False branch),1996,1997,(1998,take the True branch),(1998,take the True branch),(1998,take the True branch),1999,2000,(2001,take the False branch),2017,(2019,take the True branch),2020,2044,(2051,take the False branch),(2051,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="864">
  <name>
   RED-cmp-always
  </name>
  <location line="3121" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseEntityValue
   line-by-line trace: 3082,3083,3084,3085,3086,3087,3088,3089,(3091,take the True branch),3097,(3098,take the False branch),3107,3108,(3109,take the False branch),3110,3111,(3121,take the False branch),(3121,reference to variable `c')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="865">
  <name>
   RED-cmp-always
  </name>
  <location line="3255" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseAttValueComplex
   line-by-line trace: 3221,3222,3223,3224,3225,3226,3227,3228,(3230,take the True branch),3231,3232,3233,3246,3247,(3248,take the False branch),3253,3254,3255,(3254,take the True branch),(3255,take the False branch),(3255,reference to variable `c')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="866">
  <name>
   RED-cmp-always
  </name>
  <location line="3389" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseAttValueComplex
   line-by-line trace: 3221,3222,3223,3224,3225,3226,3227,3228,(3230,take the True branch),3231,3232,3233,3246,3247,(3248,take the False branch),3253,3254,3255,(3254,take the False branch),3380,(3382,take the True branch),(3382,take the True branch),(3383,take the False branch),3385,(3386,take the False branch),(3388,take the True branch),(3389,take the True branch),(3389,take the False branch),(3389,reference to variable `c')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="867">
  <name>
   RED-cmp-always
  </name>
  <location line="3490" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseSystemLiteral
   line-by-line trace: 3463,3464,3465,3466,3467,3468,3469,(3471,take the False branch),(3472,take the False branch),(3475,take the True branch),3476,3477,3483,(3484,take the False branch),3488,3489,(3490,take the False branch),(3490,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="868">
  <name>
   RED-cmp-always
  </name>
  <location line="3520" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseSystemLiteral
   line-by-line trace: 3463,3464,3465,3466,3467,3468,3469,(3471,take the False branch),(3472,take the False branch),(3475,take the True branch),3476,3477,3483,(3484,take the False branch),3488,3489,(3490,take the True branch),(3490,take the True branch),(3490,take the False branch),(3490,take the False branch),(3490,take the True branch),(3490,take the False branch),3518,3519,(3520,take the False branch),(3520,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="869">
  <name>
   RED-cmp-always
  </name>
  <location line="3818" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCharDataComplex
   line-by-line trace: 3808,3809,3810,3811,(3813,take the False branch),(3814,take the True branch),(3814,take the True branch),3815,3816,3817,(3816,take the True branch),(3817,take the True branch),(3818,take the False branch),(3818,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="870">
  <name>
   RED-cmp-always
  </name>
  <location line="3875" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCharDataComplex
   line-by-line trace: 3808,3809,3810,3811,(3813,take the False branch),(3814,take the True branch),(3814,take the True branch),3815,3816,3817,(3816,take the True branch),(3817,take the True branch),(3818,take the True branch),(3818,take the True branch),(3818,take the False branch),(3818,take the False branch),(3818,take the False branch),3855,(3857,take the False branch),(3875,take the True branch),(3875,take the False branch),(3875,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="871">
  <name>
   RED-cmp-always
  </name>
  <location line="4002" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCommentComplex
   line-by-line trace: 3983,3984,3985,3986,3987,(3989,take the True branch),3990,3991,3992,(3993,take the False branch),(3998,take the True branch),(3998,take the True branch),3999,(4000,take the False branch),(4002,take the False branch),(4002,reference to variable `q')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="872">
  <name>
   RED-cmp-always
  </name>
  <location line="4013" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCommentComplex
   line-by-line trace: 3983,3984,3985,3986,3987,(3989,take the True branch),3990,3991,3992,(3993,take the False branch),(3998,take the True branch),(3998,take the True branch),3999,(4000,take the False branch),(4002,take the True branch),(4002,take the True branch),(4002,take the False branch),(4002,take the False branch),(4002,take the False branch),(4009,take the False branch),(4009,take the True branch),4010,(4011,take the False branch),(4013,take the False branch),(4013,reference to variable `r')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="873">
  <name>
   RED-cmp-always
  </name>
  <location line="4024" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCommentComplex
   line-by-line trace: 3983,3984,3985,3986,3987,(3989,take the True branch),3990,3991,3992,(3993,take the False branch),(3998,take the True branch),(3998,take the True branch),3999,(4000,take the False branch),(4002,take the True branch),(4002,take the True branch),(4002,take the False branch),(4002,take the False branch),(4002,take the False branch),(4009,take the False branch),(4009,take the True branch),4010,(4011,take the False branch),(4013,take the True branch),(4013,take the True branch),(4013,take the False branch),(4013,take the False branch),(4013,take the False branch),(4020,take the True branch),(4020,take the True branch),4021,(4022,take the False branch),(4024,take the False branch),(4024,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="874">
  <name>
   RED-cmp-always
  </name>
  <location line="4064" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCommentComplex
   line-by-line trace: 3983,3984,3985,3986,3987,(3989,take the True branch),3990,3991,3992,(3993,take the False branch),(3998,take the True branch),(3998,take the True branch),3999,(4000,take the False branch),(4002,take the True branch),(4002,take the True branch),(4002,take the False branch),(4002,take the False branch),(4002,take the False branch),(4009,take the False branch),(4009,take the True branch),4010,(4011,take the False branch),(4013,take the True branch),(4013,take the True branch),(4013,take the False branch),(4013,take the False branch),(4013,take the False branch),(4020,take the True branch),(4020,take the True branch),4021,(4022,take the False branch),(4024,take the True branch),(4024,take the True branch),(4024,take the False branch),(4024,take the False branch),(4024,take the True branch),4026,(4025,take the False branch),(4026,take the False branch),(4026,take the False branch),4060,(4061,take the False branch),(4064,take the False branch),(4064,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="875">
  <name>
   RED-cmp-always
  </name>
  <location line="4409" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParsePI
   line-by-line trace: 4355,4356,4357,4358,4359,4360,4361,(4363,take the True branch),(4363,take the True branch),4364,4365,4366,(4370,take the False branch),(4370,take the True branch),(4370,take the True branch),(4371,take the True branch),(4371,take the False branch),4377,(4378,take the True branch),(4379,take the True branch),(4379,take the False branch),4396,(4397,take the False branch),4402,(4403,take the True branch),(4403,take the False branch),(4403,take the True branch),(4403,take the False branch),(4403,take the False branch),4407,4408,(4409,take the False branch),(4409,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="876">
  <name>
   RED-cmp-always
  </name>
  <location line="7074" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlLoadEntityContent
   line-by-line trace: 7033,7034,7035,7036,7040,(7038,take the False branch),(7038,take the False branch),(7039,take the True branch),(7040,take the False branch),(7041,take the False branch),(7047,take the True branch),7048,7049,7048,7051,(7052,take the False branch),7058,(7059,take the False branch),7070,(7071,take the False branch),7072,(7073,take the True branch),(7073,take the True branch),(7074,take the False branch),(7074,reference to variable `c')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="877">
  <name>
   RED-cmp-always
  </name>
  <location line="7086" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlLoadEntityContent
   line-by-line trace: 7033,7034,7035,7036,7040,(7038,take the False branch),(7038,take the False branch),(7039,take the True branch),(7040,take the False branch),(7041,take the False branch),(7047,take the True branch),7048,7049,7048,7051,(7052,take the False branch),7058,(7059,take the False branch),7070,(7071,take the False branch),7072,(7073,take the True branch),(7073,take the True branch),(7074,take the True branch),(7074,take the True branch),(7074,take the False branch),(7074,take the False branch),(7074,take the False branch),(7084,take the True branch),(7084,take the False branch),(7086,take the False branch),(7086,reference to variable `c')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="878">
  <name>
   RED-cmp-always
  </name>
  <location line="8698" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCDSect
   line-by-line trace: 8682,8683,8684,8685,8686,8687,8688,(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8692,take the True branch),(8692,take the True branch),(8692,take the True branch),8696,8697,(8698,take the False branch),(8698,reference to variable `r')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="879">
  <name>
   RED-cmp-always
  </name>
  <location line="8705" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCDSect
   line-by-line trace: 8682,8683,8684,8685,8686,8687,8688,(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8692,take the True branch),(8692,take the True branch),(8692,take the True branch),8696,8697,(8698,take the True branch),(8698,take the True branch),(8698,take the False branch),(8698,take the False branch),(8698,take the False branch),(8703,take the True branch),(8703,take the True branch),8704,(8705,take the False branch),(8705,reference to variable `s')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="880">
  <name>
   RED-cmp-always
  </name>
  <location line="8717" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseCDSect
   line-by-line trace: 8682,8683,8684,8685,8686,8687,8688,(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8691,take the True branch),(8692,take the True branch),(8692,take the True branch),(8692,take the True branch),8696,8697,(8698,take the True branch),(8698,take the True branch),(8698,take the False branch),(8698,take the False branch),(8698,take the False branch),(8703,take the True branch),(8703,take the True branch),8704,(8705,take the True branch),(8705,take the True branch),(8705,take the False branch),(8705,take the False branch),(8705,take the False branch),(8710,take the True branch),(8710,take the True branch),8711,8712,(8713,take the False branch),(8717,take the False branch),(8717,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="881">
  <name>
   RED-cmp-always
  </name>
  <location line="9917" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlCheckCdataPush
   line-by-line trace: 9895,9896,9897,(9899,take the False branch),(9899,take the False branch),(9902,take the True branch),9903,(9904,take the False branch),(9911,take the True branch),(9912,take the False branch),(9913,take the False branch),9915,9916,(9917,take the False branch),(9917,reference to variable `codepoint')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="882">
  <name>
   RED-cmp-always
  </name>
  <location line="9928" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlCheckCdataPush
   line-by-line trace: 9895,9896,9897,(9899,take the False branch),(9899,take the False branch),(9902,take the True branch),9903,(9904,take the False branch),(9911,take the False branch),(9920,take the True branch),(9921,take the False branch),(9922,take the False branch),(9923,take the False branch),9925,9926,9927,(9928,take the False branch),(9928,reference to variable `codepoint')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="883">
  <name>
   RED-cmp-always
  </name>
  <location line="9941" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlCheckCdataPush
   line-by-line trace: 9895,9896,9897,(9899,take the False branch),(9899,take the False branch),(9902,take the True branch),9903,(9904,take the False branch),(9911,take the False branch),(9920,take the False branch),(9931,take the True branch),(9932,take the False branch),9934,(9933,take the False branch),(9934,take the False branch),(9935,take the False branch),9937,9938,9939,9940,(9941,take the False branch),(9941,reference to variable `codepoint')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="884">
  <name>
   RED-cmp-always
  </name>
  <location line="683" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlCurrentChar
   line-by-line trace: (615,take the False branch),(615,take the False branch),(615,take the False branch),616,113,(616,take the False branch),(619,take the True branch),(619,take the False branch),(623,take the True branch),635,636,637,639,(640,take the True branch),(641,take the False branch),(641,take the False branch),(643,take the True branch),644,(645,take the False branch),(647,take the True branch),(648,take the True branch),649,(650,take the False branch),(652,take the False branch),668,669,670,671,(672,take the False branch),(683,take the True branch),(683,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="885">
  <name>
   RED-cmp-always
  </name>
  <location line="683" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlCurrentChar
   line-by-line trace: (615,take the False branch),(615,take the False branch),(615,take the False branch),616,113,(616,take the False branch),(619,take the True branch),(619,take the False branch),(623,take the True branch),635,636,637,639,(640,take the True branch),(641,take the False branch),(641,take the False branch),(643,take the True branch),644,(645,take the False branch),(647,take the True branch),(648,take the True branch),649,(650,take the False branch),(652,take the False branch),668,669,670,671,(672,take the False branch),(683,take the True branch),(683,take the True branch),(683,take the False branch),(683,take the False branch),(683,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="886">
  <name>
   RED-cmp-always
  </name>
  <location line="683" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlCurrentChar
   line-by-line trace: (615,take the False branch),(615,take the False branch),(615,take the False branch),616,113,(616,take the False branch),(619,take the True branch),(619,take the False branch),(623,take the True branch),635,636,637,639,(640,take the True branch),(641,take the False branch),(641,take the False branch),(643,take the True branch),644,(645,take the False branch),(647,take the True branch),(648,take the True branch),649,(650,take the False branch),(652,take the False branch),668,669,670,671,(672,take the False branch),(683,take the False branch),(683,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="887">
  <name>
   RED-cmp-always
  </name>
  <location line="816" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlStringCurrentChar
   line-by-line trace: (770,take the False branch),(770,take the False branch),(771,take the False branch),(771,take the True branch),783,784,786,(787,take the True branch),(788,take the False branch),(790,take the False branch),812,813,814,(816,take the False branch),(816,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="888">
  <name>
   RED-cmp-always
  </name>
  <location line="4361" path="chrome-5.0.375.70/third_party/libxml/valid.c">
   <explanation>
   function or method: xmlValidateOneAttribute
   line-by-line trace: 4279,4280,4281,(4283,take the False branch),(4283,take the True branch),(4283,take the False branch),(4284,take the False branch),(4284,take the False branch),(4285,take the False branch),(4285,take the False branch),(4287,take the False branch),(4309,take the False branch),(4327,take the False branch),4333,4335,(4336,take the True branch),4337,4339,4337,4340,(4344,take the True branch),(4345,take the True branch),4346,4348,4346,4349,(4354,take the False branch),(4359,take the False branch),(4360,take the True branch),(4361,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="889">
  <name>
   RED-cmp-always
  </name>
  <location line="4558" path="chrome-5.0.375.70/third_party/libxml/valid.c">
   <explanation>
   function or method: xmlValidateOneNamespace
   line-by-line trace: 4456,4457,4458,(4460,take the False branch),(4460,take the True branch),(4460,take the False branch),(4461,take the False branch),(4461,take the False branch),(4462,take the False branch),(4462,take the False branch),(4464,take the True branch),4465,4466,4468,(4469,take the False branch),(4473,take the False branch),4480,(4482,take the True branch),(4482,take the True branch),4483,(4486,take the True branch),(4486,take the True branch),4487,(4489,take the True branch),(4490,take the False branch),4497,4498,4497,(4499,take the False branch),(4507,take the False branch),4520,(4521,take the False branch),(4535,take the False branch),(4551,take the True branch),(4552,take the True branch),4553,(4556,take the False branch),(4557,take the True branch),(4558,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="890">
  <name>
   RED-cmp-always
  </name>
  <location line="5766" path="chrome-5.0.375.70/third_party/libxml/valid.c">
   <explanation>
   function or method: xmlValidatePushCData
   line-by-line trace: 5733,(5736,take the False branch),(5738,take the False branch),(5740,take the True branch),(5740,take the True branch),5741,5742,(5747,take the True branch),5748,5750,5765,(5766,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="891">
  <name>
   RED-cmp-always
  </name>
  <location line="1886" path="chrome-5.0.375.70/third_party/libxml/xinclude.c">
   <explanation>
   function or method: xmlXIncludeLoadTxt
   line-by-line trace: 1784,1785,1786,1787,1788,1789,1790,1795,(1796,take the False branch),(1801,take the False branch),1808,1809,(1810,take the False branch),(1820,take the False branch),(1831,take the False branch),(1840,take the True branch),(1840,take the True branch),1841,(1843,take the False branch),1865,(1866,take the False branch),1870,(1875,take the True branch),1876,1877,1879,1880,(1881,take the True branch),1882,1883,1885,(1886,take the False branch),(1886,reference to variable `cur')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="892">
  <name>
   RED-cmp-always
  </name>
  <location line="2917" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlRegCheckCharacter
   line-by-line trace: 2914,2915,(2917,take the False branch),(2917,take the False branch),(2917,reference to variable `codepoint')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="893">
  <name>
   RED-cmp-always
  </name>
  <location line="4932" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlFAParseCharRef
   line-by-line trace: 4916,(4918,take the False branch),(4918,take the False branch),4920,4921,4922,(4923,take the True branch),4924,4925,4927,(4926,take the True branch),(4926,take the False branch),(4927,take the True branch),(4927,take the False branch),(4928,take the True branch),(4928,take the True branch),4929,4930,(4929,take the True branch),(4929,take the False branch),(4930,take the True branch),(4930,take the True branch),(4932,integer constant 48)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="894">
  <name>
   RED-cmp-always
  </name>
  <location line="4934" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlFAParseCharRef
   line-by-line trace: 4916,(4918,take the False branch),(4918,take the False branch),4920,4921,4922,(4923,take the True branch),4924,4925,4927,(4926,take the True branch),(4926,take the False branch),(4927,take the True branch),(4927,take the False branch),(4928,take the True branch),(4928,take the True branch),4929,4930,(4929,take the True branch),(4929,take the False branch),(4930,take the True branch),(4930,take the True branch),(4932,take the True branch),(4932,take the False branch),(4934,take the True branch),(4934,integer constant 102)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="895">
  <name>
   RED-cmp-always
  </name>
  <location line="286" path="chrome-5.0.375.70/third_party/libxml/xmlsave.c">
   <explanation>
   function or method: xmlEscapeEntities
   line-by-line trace: 206,207,208,209,210,212,(214,take the True branch),(214,take the True branch),(215,take the False branch),(223,take the False branch),(231,take the False branch),241,(240,take the False branch),(241,take the False branch),(241,take the False branch),(247,take the True branch),(251,take the False branch),(253,take the False branch),(257,take the False branch),(263,take the True branch),(264,take the False branch),265,266,267,268,269,270,(286,take the False branch),(286,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="896">
  <name>
   RED-cmp-always
  </name>
  <location line="1840" path="chrome-5.0.375.70/third_party/libxml/xmlsave.c">
   <explanation>
   function or method: xmlAttrSerializeTxtContent
   line-by-line trace: 1751,(1753,take the False branch),1755,(1756,take the True branch),(1757,take the False branch),(1763,take the False branch),(1769,take the False branch),(1775,take the False branch),(1781,take the False branch),(1787,take the False branch),(1793,take the False branch),(1799,take the True branch),(1799,take the False branch),(1800,take the True branch),1804,1805,(1807,take the True branch),1808,(1809,take the False branch),(1818,take the False branch),(1823,take the False branch),(1830,take the False branch),(1840,take the False branch),(1840,take the False branch),(1840,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="897">
  <name>
   RED-cmp-always
  </name>
  <location line="4369" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathDifference
   line-by-line trace: 4355,4356,4357,(4359,take the False branch),(4359,take the False branch),(4359,take the False branch),4362,(4363,take the False branch),(4363,take the False branch),(4363,take the False branch),(4366,take the False branch),(4368,take the True branch),(4369,take the True branch),(4369,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="898">
  <name>
   RED-cmp-always
  </name>
  <location line="4403" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathIntersection
   line-by-line trace: 4389,4390,4391,(4393,take the False branch),(4395,take the False branch),(4395,take the False branch),(4395,take the False branch),(4397,take the False branch),(4397,take the False branch),(4397,take the False branch),(4400,take the True branch),(4402,take the True branch),(4403,take the True branch),(4403,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="899">
  <name>
   RED-cmp-always
  </name>
  <location line="4437" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathDistinctSorted
   line-by-line trace: 4422,4423,4424,4425,4426,(4428,take the False branch),(4428,take the False branch),(4428,take the False branch),4431,(4432,take the False branch),(4434,take the True branch),4435,(4436,take the True branch),(4437,take the True branch),(4437,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="900">
  <name>
   RED-cmp-always
  </name>
  <location line="4493" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathHasSameNodes
   line-by-line trace: 4484,4485,(4487,take the False branch),(4487,take the False branch),(4487,take the False branch),(4488,take the False branch),(4488,take the False branch),(4488,take the False branch),(4491,take the True branch),(4492,take the True branch),(4493,take the True branch),(4493,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="901">
  <name>
   RED-cmp-always
  </name>
  <location line="4530" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNodeLeadingSorted
   line-by-line trace: 4514,4515,4516,(4518,take the False branch),4521,(4522,take the False branch),(4524,take the False branch),(4524,take the False branch),(4524,take the False branch),(4525,take the False branch),(4528,take the True branch),(4529,take the True branch),(4530,take the True branch),(4530,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="902">
  <name>
   RED-cmp-always
  </name>
  <location line="4634" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathNodeTrailingSorted
   line-by-line trace: 4618,4619,4620,(4622,take the False branch),4625,(4626,take the False branch),(4628,take the False branch),(4628,take the False branch),(4628,take the False branch),(4629,take the False branch),(4632,take the True branch),(4633,take the True branch),(4634,take the True branch),(4634,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="903">
  <name>
   RED-cmp-always
  </name>
  <location line="8850" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathConcatFunction
   line-by-line trace: 8845,8846,(8848,take the False branch),(8849,take the True branch),(8850,take the False branch),(8850,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="904">
  <name>
   RED-cmp-always
  </name>
  <location line="8984" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringFunction
   line-by-line trace: 8978,8979,8980,8981,(8983,take the True branch),(8984,take the False branch),(8984,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="905">
  <name>
   RED-cmp-always
  </name>
  <location line="8987" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathSubstringFunction
   line-by-line trace: 8978,8979,8980,8981,(8983,take the True branch),(8984,take the False branch),(8984,take the False branch),(8986,take the True branch),(8987,take the False branch),(8987,integer constant 3)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="906">
  <name>
   RED-cmp-always
  </name>
  <location line="9687" path="chrome-5.0.375.70/third_party/libxml/xpath.c">
   <explanation>
   function or method: xmlXPathCurrentChar
   line-by-line trace: 9637,9638,9639,(9641,take the False branch),9643,9656,(9657,take the True branch),(9658,take the False branch),(9660,take the False branch),9683,9684,9685,(9687,take the False branch),(9687,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="907">
  <name>
   RED-cmp-always
  </name>
  <location line="821" path="chrome-5.0.375.70/third_party/libxslt/libxslt/numbers.c">
   <explanation>
   function or method: xsltNumberFormat
   line-by-line trace: 739,740,741,742,743,(745,take the True branch),(745,take the True branch),746,749,(751,take the False branch),755,(756,take the False branch),759,(764,take the False branch),(777,take the True branch),(779,take the False branch),(795,take the False branch),(813,take the True branch),814,820,819,818,817,816,814,(821,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="908">
  <name>
   RED-cmp-always
  </name>
  <location line="1274" path="chrome-5.0.375.70/third_party/libxslt/libxslt/pattern.c">
   <explanation>
   function or method: xsltScanLiteral
   line-by-line trace: 1265,1266,1267,(1269,take the False branch),(1269,take the True branch),(1269,take the False branch),(1269,take the False branch),(1270,take the True branch),(1271,take the True branch),1272,1273,(1274,take the False branch),(1274,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="909">
  <name>
   RED-cmp-always
  </name>
  <location line="1278" path="chrome-5.0.375.70/third_party/libxslt/libxslt/pattern.c">
   <explanation>
   function or method: xsltScanLiteral
   line-by-line trace: 1265,1266,1267,(1269,take the False branch),(1269,take the True branch),(1269,take the False branch),(1269,take the False branch),(1270,take the True branch),(1271,take the True branch),1272,1273,(1274,take the True branch),(1274,take the True branch),(1274,take the False branch),(1274,take the True branch),(1274,take the False branch),(1278,take the False branch),(1278,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="910">
  <name>
   RED-cmp-always
  </name>
  <location line="1290" path="chrome-5.0.375.70/third_party/libxslt/libxslt/pattern.c">
   <explanation>
   function or method: xsltScanLiteral
   line-by-line trace: 1265,1266,1267,(1269,take the False branch),(1269,take the True branch),(1269,take the False branch),(1269,take the False branch),(1270,take the False branch),(1286,take the True branch),(1287,take the True branch),1288,1289,(1290,take the False branch),(1290,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="911">
  <name>
   RED-cmp-always
  </name>
  <location line="1294" path="chrome-5.0.375.70/third_party/libxslt/libxslt/pattern.c">
   <explanation>
   function or method: xsltScanLiteral
   line-by-line trace: 1265,1266,1267,(1269,take the False branch),(1269,take the True branch),(1269,take the False branch),(1269,take the False branch),(1270,take the False branch),(1286,take the True branch),(1287,take the True branch),1288,1289,(1290,take the True branch),(1290,take the True branch),(1290,take the False branch),(1290,take the False branch),(1290,take the False branch),(1294,take the False branch),(1294,reference to variable `val')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="912">
  <name>
   RED-cmp-always
  </name>
  <location line="1420" path="chrome-5.0.375.70/third_party/skia/src/core/SkCanvas.cpp">
   <explanation>
   function or method: SkCanvas::LayerIter::LayerIter
   line-by-line trace: 1418,(1420,sizeof a class SkDrawIter)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="913">
  <name>
   RED-cmp-always
  </name>
  <location line="483" path="chrome-5.0.375.70/third_party/skia/src/core/SkDraw.cpp">
   <explanation>
   function or method: PtProcRec::chooseProc
   line-by-line trace: 480,(483,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="914">
  <name>
   RED-cmp-always
  </name>
  <location line="484" path="chrome-5.0.375.70/third_party/skia/src/core/SkDraw.cpp">
   <explanation>
   function or method: PtProcRec::chooseProc
   line-by-line trace: 480,(483,take the True branch),(483,take the False branch),(484,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="915">
  <name>
   RED-cmp-always
  </name>
  <location line="485" path="chrome-5.0.375.70/third_party/skia/src/core/SkDraw.cpp">
   <explanation>
   function or method: PtProcRec::chooseProc
   line-by-line trace: 480,(483,take the True branch),(483,take the False branch),(484,take the True branch),(484,take the False branch),(485,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="916">
  <name>
   RED-cmp-always
  </name>
  <location line="1398" path="chrome-5.0.375.70/third_party/skia/src/core/SkPaint.cpp">
   <explanation>
   function or method: write_scalar
   line-by-line trace: (1398,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="917">
  <name>
   RED-cmp-always
  </name>
  <location line="1406" path="chrome-5.0.375.70/third_party/skia/src/core/SkPaint.cpp">
   <explanation>
   function or method: read_scalar
   line-by-line trace: (1406,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="918">
  <name>
   RED-cmp-always
  </name>
  <location line="730" path="chrome-5.0.375.70/third_party/skia/src/core/SkRegion.cpp">
   <explanation>
   function or method: RgnOper::RgnOper
   line-by-line trace: (730,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="919">
  <name>
   RED-cmp-always
  </name>
  <location line="731" path="chrome-5.0.375.70/third_party/skia/src/core/SkRegion.cpp">
   <explanation>
   function or method: RgnOper::RgnOper
   line-by-line trace: (730,take the False branch),(730,take the False branch),(731,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="920">
  <name>
   RED-cmp-always
  </name>
  <location line="732" path="chrome-5.0.375.70/third_party/skia/src/core/SkRegion.cpp">
   <explanation>
   function or method: RgnOper::RgnOper
   line-by-line trace: (730,take the False branch),(730,take the False branch),(731,take the True branch),(731,take the False branch),(732,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="921">
  <name>
   RED-cmp-always
  </name>
  <location line="733" path="chrome-5.0.375.70/third_party/skia/src/core/SkRegion.cpp">
   <explanation>
   function or method: RgnOper::RgnOper
   line-by-line trace: (730,take the False branch),(730,take the False branch),(731,take the True branch),(731,take the False branch),(732,take the True branch),(732,take the False branch),(733,integer constant 3)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="922">
  <name>
   RED-cmp-always
  </name>
  <location line="163" path="chrome-5.0.375.70/third_party/skia/src/core/SkScan_AntiPath.cpp">
   <explanation>
   function or method: SuperBlitter::blitH
   line-by-line trace: 127,(128,take the True branch),(128,take the False branch),130,(132,take the False branch),(139,take the False branch),(139,take the False branch),(140,take the True branch),(140,take the True branch),(140,take the False branch),141,(144,take the True branch),146,147,160,161,(163,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="923">
  <name>
   RED-cmp-always
  </name>
  <location line="321" path="chrome-5.0.375.70/third_party/skia/src/core/SkScan_AntiPath.cpp">
   <explanation>
   function or method: MaskSuperBlitter::blitH
   line-by-line trace: 284,(286,take the False branch),(286,take the False branch),(286,take the False branch),287,(292,take the False branch),298,(299,take the False branch),(299,take the False branch),(299,take the False branch),303,(306,take the True branch),308,309,316,318,319,(321,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="924">
  <name>
   RED-cmp-always
  </name>
  <location line="4348" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: interiorBlockValidate
   line-by-line trace: 4318,4319,4320,4321,(4323,take the True branch),(4324,take the True branch),(4325,take the True branch),4328,(4329,take the True branch),(4330,take the True branch),(4331,take the True branch),4332,4333,4336,(4337,take the True branch),(4338,take the True branch),4339,4340,(4343,take the True branch),4345,(4346,take the True branch),(4347,take the True branch),(4348,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="925">
  <name>
   RED-cmp-always
  </name>
  <location line="4367" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: interiorBlockValidate
   line-by-line trace: 4318,4319,4320,4321,(4323,take the True branch),(4324,take the True branch),(4325,take the True branch),4328,(4329,take the True branch),(4330,take the True branch),(4331,take the True branch),4332,4333,4336,(4337,take the True branch),(4338,take the True branch),4339,4340,(4343,take the True branch),4345,(4346,take the True branch),(4347,take the True branch),(4348,take the True branch),(4349,take the True branch),4350,4351,(4354,take the True branch),4356,(4357,take the True branch),(4358,take the True branch),(4359,take the True branch),4360,4361,4364,(4365,take the True branch),(4366,take the True branch),(4367,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="926">
  <name>
   RED-cmp-always
  </name>
  <location line="4742" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: leafNodeValidate
   line-by-line trace: 4723,(4725,take the False branch),(4726,take the True branch),(4727,take the True branch),(4728,take the True branch),4731,(4732,take the True branch),(4733,take the True branch),(4734,take the True branch),4735,4736,4739,(4740,take the True branch),(4741,take the True branch),(4742,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="927">
  <name>
   RED-cmp-always
  </name>
  <location line="4751" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: leafNodeValidate
   line-by-line trace: 4723,(4725,take the False branch),(4726,take the True branch),(4727,take the True branch),(4728,take the True branch),4731,(4732,take the True branch),(4733,take the True branch),(4734,take the True branch),4735,4736,4739,(4740,take the True branch),(4741,take the True branch),(4742,take the True branch),(4743,take the True branch),4744,4745,4748,(4749,take the True branch),(4750,take the True branch),(4751,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="928">
  <name>
   RED-cmp-always
  </name>
  <location line="4768" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: leafNodeValidate
   line-by-line trace: 4723,(4725,take the False branch),(4726,take the True branch),(4727,take the True branch),(4728,take the True branch),4731,(4732,take the True branch),(4733,take the True branch),(4734,take the True branch),4735,4736,4739,(4740,take the True branch),(4741,take the True branch),(4742,take the True branch),(4743,take the True branch),4744,4745,4748,(4749,take the True branch),(4750,take the True branch),(4751,take the True branch),(4752,take the True branch),4753,4754,4755,(4758,take the True branch),4759,(4760,take the True branch),(4761,take the True branch),(4762,take the True branch),4763,4764,4765,(4766,take the True branch),(4767,take the True branch),(4768,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="929">
  <name>
   RED-cmp-always
  </name>
  <location line="4776" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: leafNodeValidate
   line-by-line trace: 4723,(4725,take the False branch),(4726,take the True branch),(4727,take the True branch),(4728,take the True branch),4731,(4732,take the True branch),(4733,take the True branch),(4734,take the True branch),4735,4736,4739,(4740,take the True branch),(4741,take the True branch),(4742,take the True branch),(4743,take the True branch),4744,4745,4748,(4749,take the True branch),(4750,take the True branch),(4751,take the True branch),(4752,take the True branch),4753,4754,4755,(4758,take the True branch),4759,(4760,take the True branch),(4761,take the True branch),(4762,take the True branch),4763,4764,4765,(4766,take the True branch),(4767,take the True branch),(4768,take the True branch),(4769,take the True branch),4770,4771,4773,(4774,take the True branch),(4775,take the True branch),(4776,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="930">
  <name>
   RED-cmp-always
  </name>
  <location line="6272" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: fulltextUpdate
   line-by-line trace: 6253,6254,(6258,take the True branch),6259,(6260,take the True branch),6264,(6265,take the False branch),(6267,take the True branch),6271,(6272,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="931">
  <name>
   RED-cmp-always
  </name>
  <location line="1065" path="chrome-5.0.375.70/third_party/sqlite/src/main.c">
   <explanation>
   function or method: sqlite3_overload_function
   line-by-line trace: 1062,1063,1064,(1065,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="932">
  <name>
   RED-cmp-always
  </name>
  <location line="4518" path="chrome-5.0.375.70/third_party/sqlite/src/pager.c">
   <explanation>
   function or method: pager_incr_changecounter
   line-by-line trace: 4471,4485,4486,4491,(4492,take the True branch),(4492,take the True branch),4493,4494,4496,4499,4500,(4507,take the True branch),(4507,take the True branch),4508,(4511,take the True branch),4513,4514,4515,(4518,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="933">
  <name>
   RED-cmp-always
  </name>
  <location line="574" path="chrome-5.0.375.70/third_party/sqlite/src/pragma.c">
   <explanation>
   function or method: sqlite3Pragma
   line-by-line trace: 265,266,267,268,269,270,271,272,(273,take the False branch),274,278,(279,take the False branch),280,(285,take the True branch),(285,take the False branch),289,(290,take the False branch),(291,take the True branch),292,297,(298,take the True branch),(299,take the False branch),(320,take the False branch),(366,take the False branch),(392,take the False branch),(410,take the False branch),(425,take the False branch),(472,take the False branch),(535,take the False branch),(556,take the True branch),557,558,(559,take the False branch),(562,take the False branch),571,572,573,(574,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="934">
  <name>
   RED-cmp-always
  </name>
  <location line="391" path="chrome-5.0.375.70/third_party/sqlite/src/printf.c">
   <explanation>
   function or method: sqlite3VXPrintf
   line-by-line trace: 236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,259,260,261,262,263,264,267,268,(269,take the True branch),(270,take the True branch),271,272,273,(274,take the True branch),(274,take the False branch),275,(276,take the False branch),(278,take the False branch),283,284,283,285,286,287,288,294,(296,take the True branch),(296,take the False branch),298,(299,take the True branch),300,(301,take the True branch),302,303,305,(312,take the True branch),313,(316,take the True branch),317,318,(319,take the True branch),320,(321,take the True branch),322,(333,take the True branch),334,335,(336,take the True branch),337,338,346,347,(348,take the True branch),(349,take the True branch),350,(351,take the False branch),(351,take the True branch),352,356,359,(363,take the True branch),(363,take the False branch),388,389,390,(391,sizeof a integer)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="935">
  <name>
   RED-cmp-always
  </name>
  <location line="986" path="chrome-5.0.375.70/third_party/zlib/contrib/minizip/unzip.c">
   <explanation>
   function or method: unzlocal_CheckCurrentFileCoherencyHeader
   line-by-line trace: 972,973,974,975,977,978,979,981,982,981,(982,take the False branch),(986,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="936">
  <name>
   RED-cmp-always
  </name>
  <location line="1968" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Value::StrictEquals
   line-by-line trace: 1956,(1955,take the False branch),(1955,take the False branch),(1956,take the False branch),(1959,take the True branch),(1959,take the False branch),1960,1961,(1963,take the True branch),(1964,take the False branch),1965,1966,(1968,take the True branch),(1968,take the False branch),(1968,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="937">
  <name>
   RED-cmp-always
  </name>
  <location line="1968" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Value::StrictEquals
   line-by-line trace: 1956,(1955,take the False branch),(1955,take the False branch),(1956,take the False branch),(1959,take the True branch),(1959,take the False branch),1960,1961,(1963,take the True branch),(1964,take the False branch),1965,1966,(1968,take the True branch),(1968,take the True branch),(1968,take the True branch),(1968,take the False branch),(1968,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="938">
  <name>
   RED-cmp-always
  </name>
  <location line="3366" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Date::New
   line-by-line trace: 3364,(3365,take the True branch),(3365,take the False branch),(3366,take the False branch),(3366,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="939">
  <name>
   RED-cmp-always
  </name>
  <location line="3442" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Number::New
   line-by-line trace: 3441,(3442,take the False branch),(3442,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="940">
  <name>
   RED-cmp-always
  </name>
  <location line="643" path="chrome-5.0.375.70/v8/src/conversions.cc">
   <explanation>
   function or method: v8::internal::DoubleToCString
   line-by-line trace: 641,(643,take the False branch),(643,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="941">
  <name>
   RED-cmp-always
  </name>
  <location line="247" path="chrome-5.0.375.70/v8/src/debug-agent.cc">
   <explanation>
   function or method: v8::internal::DebuggerAgentUtil::ReceiveMessage
   line-by-line trace: 214,217,(218,take the True branch),219,220,221,222,223,(226,take the False branch),(226,take the False branch),(241,take the False branch),246,(247,a comparison operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="942">
  <name>
   RED-cmp-always
  </name>
  <location line="433" path="chrome-5.0.375.70/v8/src/execution.cc">
   <explanation>
   function or method: v8::internal::Execution::ToBoolean
   line-by-line trace: (425,take the False branch),426,(427,take the False branch),(429,take the False branch),(429,take the False branch),(431,take the True branch),432,(433,take the False branch),(433,take the False branch),(433,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="943">
  <name>
   RED-cmp-always
  </name>
  <location line="1574" path="chrome-5.0.375.70/v8/src/heap.cc">
   <explanation>
   function or method: v8::internal::Heap::CreateInitialObjects
   line-by-line trace: 1568,1571,(1572,take the False branch),1573,(1574,take the False branch),(1574,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="944">
  <name>
   RED-cmp-always
  </name>
  <location line="1775" path="chrome-5.0.375.70/v8/src/heap.cc">
   <explanation>
   function or method: v8::internal::Heap::SmiOrNumberFromDouble
   line-by-line trace: 1771,1772,1773,1774,(1775,sizeof member `bits' of `plus_zero')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="945">
  <name>
   RED-cmp-always
  </name>
  <location line="324" path="chrome-5.0.375.70/v8/src/ia32/ic-ia32.cc">
   <explanation>
   function or method: v8::internal::KeyedLoadIC::GenerateGeneric
   line-by-line trace: 305,306,307,310,311,314,317,318,319,(324,integer constant 158)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="946">
  <name>
   RED-cmp-always
  </name>
  <location line="1161" path="chrome-5.0.375.70/v8/src/ia32/ic-ia32.cc">
   <explanation>
   function or method: v8::internal::CallIC::GenerateNormal
   line-by-line trace: 1145,1148,1151,1152,1155,1156,1157,1158,(1161,integer constant 166)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="947">
  <name>
   RED-cmp-always
  </name>
  <location line="1294" path="chrome-5.0.375.70/v8/src/ia32/ic-ia32.cc">
   <explanation>
   function or method: v8::internal::LoadIC::GenerateNormal
   line-by-line trace: 1281,1284,1285,1288,1289,1290,1291,(1294,integer constant 166)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="948">
  <name>
   RED-cmp-always
  </name>
  <location line="607" path="chrome-5.0.375.70/v8/src/ia32/regexp-macro-assembler-ia32.cc">
   <explanation>
   function or method: v8::internal::RegExpMacroAssemblerIA32::Fail
   line-by-line trace: (607,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="949">
  <name>
   RED-cmp-always
  </name>
  <location line="54" path="chrome-5.0.375.70/v8/src/ia32/register-allocator-ia32.cc">
   <explanation>
   function or method: v8::internal::Result::ToRegister
   line-by-line trace: 41,(42,take the True branch),43,44,(45,take the True branch),46,(47,take the False branch),(51,take the True branch),52,53,(54,take the True branch),(54,take the False branch),(54,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="950">
  <name>
   RED-cmp-always
  </name>
  <location line="103" path="chrome-5.0.375.70/v8/src/ia32/register-allocator-ia32.cc">
   <explanation>
   function or method: v8::internal::Result::ToRegister
   line-by-line trace: 86,(87,take the True branch),88,89,(90,take the False branch),93,(94,take the True branch),(95,take the False branch),100,101,102,(103,take the True branch),(103,take the False branch),(103,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="951">
  <name>
   RED-cmp-always
  </name>
  <location line="112" path="chrome-5.0.375.70/v8/src/ia32/stub-cache-ia32.cc">
   <explanation>
   function or method: v8::internal::StubCache::GenerateProbe
   line-by-line trace: 108,(112,integer constant 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="952">
  <name>
   RED-cmp-always
  </name>
  <location line="1151" path="chrome-5.0.375.70/v8/src/objects.cc">
   <explanation>
   function or method: v8::internal::HeapNumber::HeapNumberToBoolean
   line-by-line trace: (1151,take the False branch),(1151,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="953">
  <name>
   RED-cmp-always
  </name>
  <location line="169" path="chrome-5.0.375.70/v8/src/platform-linux.cc">
   <explanation>
   function or method: v8::internal::OS::LocalTimezone
   line-by-line trace: (169,take the False branch),(169,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="954">
  <name>
   RED-cmp-always
  </name>
  <location line="103" path="chrome-5.0.375.70/v8/src/platform-posix.cc">
   <explanation>
   function or method: v8::internal::OS::DaylightSavingsOffset
   line-by-line trace: (103,take the False branch),(103,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="955">
  <name>
   RED-cmp-always
  </name>
  <location line="2437" path="chrome-5.0.375.70/v8/src/spaces.cc">
   <explanation>
   function or method: v8::internal::MapSpace::PrepareForMarkCompact
   line-by-line trace: 2430,(2432,take the True branch),2434,2435,(2436,take the True branch),(2437,reference to variable `page_count')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="956">
  <name>
   RED-cmp-always
  </name>
  <location line="362" path="chrome-5.0.375.70/webkit/glue/webkit_glue.cc">
   <explanation>
   function or method: webkit_glue::_GLOBAL__N__14_webkit_glue_cc_748ad7d3::BuildOSCpuInfo
   line-by-line trace: 344,356,357,359,(361,take the True branch),(362,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison always holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="957">
  <name>
   RED-cmp-never
  </name>
  <location line="132" path="chrome-5.0.375.70/base/shared_memory_posix.cc">
   <explanation>
   function or method: base::SharedMemory::FilePathForMemoryName
   line-by-line trace: (128,take the True branch),(129,take the False branch),131,132
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="958">
  <name>
   RED-cmp-never
  </name>
  <location line="123" path="chrome-5.0.375.70/chrome/browser/net/referrer.cc">
   <explanation>
   function or method: chrome_browser_net::Referrer::Serialize
   line-by-line trace: 113,(114,take the True branch),115,116,117,116,(122,take the True branch),(123,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="959">
  <name>
   RED-cmp-never
  </name>
  <location line="312" path="chrome-5.0.375.70/chrome/browser/translate/translate_manager.cc">
   <explanation>
   function or method: TranslateManager::IsShowingTranslateInfobar
   line-by-line trace: (312,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="960">
  <name>
   RED-cmp-never
  </name>
  <location line="51" path="chrome-5.0.375.70/native_client/src/shared/gio/gio_mem_snapshot.c">
   <explanation>
   function or method: GioMemoryFileSnapshotCtor
   line-by-line trace: 30,31,32,34,(35,take the False branch),(38,take the False branch),(43,take the False branch),(46,take the False branch),(51,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="961">
  <name>
   RED-cmp-never
  </name>
  <location line="153" path="chrome-5.0.375.70/native_client/src/shared/srpc/imc_buffer.c">
   <explanation>
   function or method: __NaClSrpcImcWrite
   line-by-line trace: 144,145,(153,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="962">
  <name>
   RED-cmp-never
  </name>
  <location line="163" path="chrome-5.0.375.70/native_client/src/shared/srpc/imc_buffer.c">
   <explanation>
   function or method: __NaClSrpcImcWrite
   line-by-line trace: 144,145,(153,take the False branch),(154,take the False branch),156,157,156,(163,sizeof `__is_array__')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="963">
  <name>
   RED-cmp-never
  </name>
  <location line="102" path="chrome-5.0.375.70/native_client/src/shared/srpc/nacl_srpc.c">
   <explanation>
   function or method: NaClSrpcClientCtor
   line-by-line trace: (99,take the False branch),(102,a function call to function `NaClNrdXferEffectorCtor')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="964">
  <name>
   RED-cmp-never
  </name>
  <location line="137" path="chrome-5.0.375.70/native_client/src/shared/srpc/nacl_srpc.c">
   <explanation>
   function or method: NaClSrpcServerCtor
   line-by-line trace: (134,take the False branch),(137,a function call to function `NaClNrdXferEffectorCtor')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="965">
  <name>
   RED-cmp-never
  </name>
  <location line="570" path="chrome-5.0.375.70/native_client/src/shared/srpc/rpc_universal.c">
   <explanation>
   function or method: DumpDouble
   line-by-line trace: (570,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="966">
  <name>
   RED-cmp-never
  </name>
  <location line="529" path="chrome-5.0.375.70/native_client/src/trusted/desc/nacl_desc_base.c">
   <explanation>
   function or method: NaClDescMapDescriptor
   line-by-line trace: 504,505,506,507,508,509,510,512,513,515,517,515,(518,take the False branch),(526,take the False branch),(529,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="967">
  <name>
   RED-cmp-never
  </name>
  <location line="175" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/nacl_syscall_common.c">
   <explanation>
   function or method: NaClSetBreak
   line-by-line trace: 147,148,149,150,151,152,153,154,155,156,157,158,159,160,162,163,165,167,169,170,(172,take the False branch),(175,function `NaClMutexLock')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="968">
  <name>
   RED-cmp-never
  </name>
  <location line="117" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/web_worker_stub.c">
   <explanation>
   function or method: NaClStartNativeWebWorker
   line-by-line trace: 76,78,80,81,82,83,84,87,88,(91,take the False branch),97,99,(100,take the False branch),108,115,(117,a function call to function `GioMemoryFileCtor')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="969">
  <name>
   RED-cmp-never
  </name>
  <location line="349" path="chrome-5.0.375.70/net/socket/socks5_client_socket.cc">
   <explanation>
   function or method: net::SOCKS5ClientSocket::DoHandshakeWrite
   line-by-line trace: 345,(347,take the True branch),348,(349,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="970">
  <name>
   RED-cmp-never
  </name>
  <location line="287" path="chrome-5.0.375.70/net/socket/ssl_client_socket_nss.cc">
   <explanation>
   function or method: net::SSLClientSocketNSS::Connect
   line-by-line trace: (277,take the False branch),(278,take the False branch),(279,take the True branch),(280,take the True branch),(281,take the True branch),(282,take the True branch),(283,take the False branch),285,(287,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="971">
  <name>
   RED-cmp-never
  </name>
  <location line="2693" path="chrome-5.0.375.70/net/third_party/nss/ssl/sslcon.c">
   <explanation>
   function or method: ssl2_HandleMessage
   line-by-line trace: 2527,2528,2529,2530,2531,(2533,take the False branch),(2533,take the True branch),(2535,take the True branch),2537,(2539,take the False branch),(2542,take the True branch),(2544,take the True branch),2546,2621,(2622,take the False branch),(2627,take the False branch),2631,2632,2633,(2634,take the False branch),2638,(2639,take the True branch),2641,104,2641,(2648,take the False branch),2653,2654,2685,(2688,take the True branch),2692,(2693,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="972">
  <name>
   RED-cmp-never
  </name>
  <location line="19" path="chrome-5.0.375.70/skia/ext/convolver.cc">
   <explanation>
   function or method: skia::_GLOBAL__N__12_convolver_cc_5cdc69d7::ClampTo8
   line-by-line trace: (17,take the False branch),(19,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="973">
  <name>
   RED-cmp-never
  </name>
  <location line="1206" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: 573,574,575,576,577,578,579,580,581,582,583,584,586,587,588,600,601,602,603,(610,take the True branch),614,615,616,617,618,619,620,621,622,623,(627,take the True branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),634,1027,(1028,take the False branch),1030,(1031,take the False branch),1033,1049,(1050,take the False branch),(1055,take the True branch),1056,1057,(1062,take the True branch),1064,1070,(1078,take the True branch),1079,1080,(1090,take the False branch),(1090,take the True branch),(1096,take the True branch),1097,(1098,take the False branch),1100,1101,1102,1110,1139,1140,1141,1143,1144,(1149,take the False branch),1154,(1159,take the False branch),(1175,take the False branch),1191,1192,(1200,take the True branch),(1201,take the False branch),1205,(1206,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="974">
  <name>
   RED-cmp-never
  </name>
  <location line="1223" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: 573,574,575,576,577,578,579,580,581,582,583,584,586,587,588,600,601,602,603,(610,take the True branch),614,615,616,617,618,619,620,621,622,623,(627,take the True branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),634,1027,(1028,take the False branch),1030,(1031,take the False branch),1033,1049,(1050,take the False branch),(1055,take the True branch),1056,1057,(1062,take the True branch),1064,1070,(1078,take the True branch),1079,1080,(1090,take the False branch),(1090,take the True branch),(1096,take the True branch),1097,(1098,take the False branch),1100,1101,1102,1110,1139,1140,1141,1143,1144,(1149,take the False branch),1154,(1159,take the False branch),(1175,take the False branch),1191,1192,(1200,take the False branch),(1217,take the True branch),(1218,take the True branch),1219,1220,(1223,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="975">
  <name>
   RED-cmp-never
  </name>
  <location line="1244" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: 573,574,575,576,577,578,579,580,581,582,583,584,586,587,588,600,601,602,603,(610,take the True branch),614,615,616,617,618,619,620,621,622,623,(627,take the True branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),634,1027,(1028,take the False branch),1030,(1031,take the False branch),1033,1049,(1050,take the False branch),(1055,take the True branch),1056,1057,(1062,take the True branch),1064,1070,(1078,take the True branch),1079,1080,(1090,take the False branch),(1090,take the True branch),(1096,take the True branch),1097,(1098,take the False branch),1100,1101,1102,1110,1139,1140,1141,1143,1144,(1149,take the False branch),1154,(1159,take the True branch),(1160,take the True branch),1161,(1235,take the False branch),1239,(1244,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="976">
  <name>
   RED-cmp-never
  </name>
  <location line="2026" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="977">
  <name>
   RED-cmp-never
  </name>
  <location line="2134" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,take the True branch),2062,2122,2123,2124,2125,2126,(2131,take the True branch),(2131,take the True branch),2133,(2134,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="978">
  <name>
   RED-cmp-never
  </name>
  <location line="2158" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,take the True branch),2062,2122,2123,2124,2125,2126,(2131,take the True branch),(2131,take the True branch),2133,(2134,take the True branch),(2134,take the False branch),2141,2142,2143,2151,(2152,take the False branch),(2158,a logical operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="979">
  <name>
   RED-cmp-never
  </name>
  <location line="2325" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/wtf/dtoa.cpp">
   <explanation>
   function or method: WTF::dtoa
   line-by-line trace: 1884,1885,1886,1887,1889,1890,1892,1893,1894,1895,1900,(1901,take the True branch),1903,1904,(1908,take the False branch),(1923,take the False branch),1937,(1941,take the True branch),1943,1944,1945,1969,1971,1984,1985,(1986,take the True branch),(1986,take the True branch),1987,1988,(1989,take the True branch),(1989,take the True branch),(1990,take the True branch),1991,1992,1994,(1995,take the True branch),1996,1997,(2002,take the True branch),2003,2004,2005,2016,2020,2021,2022,2023,2024,(2026,take the True branch),(2026,take the True branch),(2026,take the True branch),2030,2031,2032,2033,2034,(2035,take the False branch),(2051,take the True branch),2052,(2053,take the False branch),(2060,take the True branch),(2060,take the True branch),(2060,take the True branch),(2061,take the True branch),2062,2122,2123,2124,2125,2126,(2131,take the False branch),2176,2177,2178,2179,(2180,take the True branch),2181,(2183,take the True branch),2181,2186,2187,2188,(2190,take the True branch),(2190,take the True branch),(2191,take the True branch),2192,2193,2194,(2196,take the False branch),2207,(2208,take the True branch),2209,2213,2216,(2214,take the False branch),(2233,take the True branch),(2233,take the True branch),2234,(2239,take the True branch),2240,2241,2242,2243,(2250,take the True branch),2251,(2252,take the True branch),2253,(2254,take the True branch),(2255,take the True branch),2256,2257,(2258,take the True branch),2259,2260,(2264,take the True branch),(2265,take the True branch),2266,2272,(2273,take the True branch),2274,2275,2278,2279,2283,2284,(2285,take the True branch),(2286,take the True branch),(2286,take the False branch),(2298,take the False branch),(2298,take the True branch),(2298,take the False branch),(2315,take the False branch),2324,(2325,a logical operation)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="980">
  <name>
   RED-cmp-never
  </name>
  <location line="271" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/Position.cpp">
   <explanation>
   function or method: WebCore::Position::next
   line-by-line trace: (251,take the False branch),253,(254,take the False branch),257,(259,take the False branch),261,(262,take the False branch),(262,take the True branch),(262,take the True branch),(263,take the False branch),(271,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="981">
  <name>
   RED-cmp-never
  </name>
  <location line="428" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/StyledElement.cpp">
   <explanation>
   function or method: WebCore::MappedAttributeHash::hash
   line-by-line trace: 418,419,421,423,424,425,426,427,(428,take the False branch),(428,integer constant 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="982">
  <name>
   RED-cmp-never
  </name>
  <location line="429" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/StyledElement.cpp">
   <explanation>
   function or method: WebCore::MappedAttributeHash::hash
   line-by-line trace: 418,419,421,423,424,425,426,427,(428,take the True branch),(428,take the True branch),(428,take the False branch),(429,integer constant 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="983">
  <name>
   RED-cmp-never
  </name>
  <location line="442" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/StyledElement.cpp">
   <explanation>
   function or method: WebCore::MappedAttributeHash::hash
   line-by-line trace: 418,419,421,423,424,425,426,427,(428,take the True branch),(428,take the True branch),(428,take the False branch),(429,take the False branch),437,438,439,440,441,(442,take the False branch),(442,integer constant 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="984">
  <name>
   RED-cmp-never
  </name>
  <location line="443" path="chrome-5.0.375.70/third_party/WebKit/WebCore/dom/StyledElement.cpp">
   <explanation>
   function or method: WebCore::MappedAttributeHash::hash
   line-by-line trace: 418,419,421,423,424,425,426,427,(428,take the True branch),(428,take the True branch),(428,take the False branch),(429,take the False branch),437,438,439,440,441,(442,take the True branch),(442,take the False branch),(443,integer constant 8)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="985">
  <name>
   RED-cmp-never
  </name>
  <location line="433" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/FTPDirectoryParser.cpp">
   <explanation>
   function or method: WebCore::parseOneFTPLine
   line-by-line trace: 88,(90,take the False branch),93,96,97,99,(102,take the False branch),(102,take the False branch),106,(107,take the True branch),(107,take the False branch),109,(111,take the True branch),(111,take the True branch),(111,take the True branch),112,(116,take the True branch),118,119,120,121,122,123,124,125,126,(128,take the True branch),130,131,132,135,(136,take the True branch),(136,take the False branch),(155,take the False branch),158,(159,take the False branch),(170,take the True branch),(170,take the False branch),(170,take the True branch),(172,take the True branch),(172,take the True branch),(172,take the True branch),174,(175,take the True branch),177,(178,take the True branch),179,(235,take the False branch),(235,take the True branch),236,237,239,(247,take the True branch),(247,take the False branch),(247,take the True branch),(260,take the True branch),(261,take the False branch),(261,take the True branch),(261,take the True branch),(262,take the False branch),(319,take the True branch),(321,take the True branch),(321,take the True branch),(321,take the True branch),322,(351,take the True branch),370,371,372,(373,take the False branch),(400,take the True branch),(400,take the True branch),(400,take the False branch),(410,take the True branch),(410,take the True branch),(412,take the False branch),(412,take the True branch),413,(414,take the True branch),(414,take the False branch),420,421,422,(424,take the False branch),(424,take the False branch),(424,take the False branch),(428,take the True branch),(433,subtraction of of sizeof member `carryBuffer' of a deref of `state' and 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="986">
  <name>
   RED-cmp-never
  </name>
  <location line="1030" path="chrome-5.0.375.70/third_party/WebKit/WebCore/loader/FrameLoader.cpp">
   <explanation>
   function or method: WebCore::FrameLoader::startIconLoader
   line-by-line trace: (997,take the False branch),(1000,take the False branch),(1000,take the False branch),1003,1004,(1005,take the False branch),(1009,take the True branch),(1009,take the True branch),1010,(1011,take the False branch),(1030,integer constant 2)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="987">
  <name>
   RED-cmp-never
  </name>
  <location line="1438" path="chrome-5.0.375.70/third_party/cld/encodings/compact_lang_det/compact_lang_det_impl.cc">
   <explanation>
   function or method: ScoreChunkIntoDoc
   line-by-line trace: (1355,take the False branch),1360,1361,(1364,take the False branch),1369,1372,1373,1376,(1380,take the True branch),1381,1382,(1404,take the True branch),(1404,take the True branch),1406,1407,1409,1410,1409,1411,1412,1411,(1413,take the False branch),(1437,take the True branch),(1438,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="988">
  <name>
   RED-cmp-never
  </name>
  <location line="160" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/opt.c">
   <explanation>
   function or method: av_set_string3
   line-by-line trace: 111,112,(113,take the True branch),114,(115,take the False branch),(117,take the False branch),(117,take the False branch),(120,take the False branch),(143,take the True branch),144,145,146,147,148,149,150,(152,take the False branch),(152,take the False branch),(155,take the True branch),(155,take the True branch),(155,take the True branch),(155,take the False branch),157,159,(160,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="989">
  <name>
   RED-cmp-never
  </name>
  <location line="561" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/aviobuf.c">
   <explanation>
   function or method: url_fdopen
   line-by-line trace: 540,541,543,(544,take the True branch),545,549,(550,take the False branch),553,(554,take the False branch),561,(560,take the True branch),561,559,(561,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="990">
  <name>
   RED-cmp-never
  </name>
  <location line="117" path="chrome-5.0.375.70/third_party/harfbuzz/contrib/harfbuzz-unicode.c">
   <explanation>
   function or method: hb_utf16_script_run_next
   line-by-line trace: (94,take the False branch),97,98,99,(100,take the False branch),102,103,104,106,(107,take the False branch),109,110,(111,take the False branch),113,114,(116,take the True branch),(117,integer constant 28)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="991">
  <name>
   RED-cmp-never
  </name>
  <location line="167" path="chrome-5.0.375.70/third_party/harfbuzz/contrib/harfbuzz-unicode.c">
   <explanation>
   function or method: hb_utf16_script_run_prev
   line-by-line trace: (144,take the False branch),147,148,149,(150,take the False branch),152,153,154,156,(157,take the False branch),159,160,(161,take the False branch),163,164,(166,take the True branch),(167,integer constant 28)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="992">
  <name>
   RED-cmp-never
  </name>
  <location line="326" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gdef.c">
   <explanation>
   function or method: Load_AttachList
   line-by-line trace: 278,280,281,283,286,(288,take the False branch),291,293,295,(296,take the False branch),(297,take the False branch),299,(301,take the False branch),304,306,308,(310,take the False branch),313,(315,take the True branch),(317,take the False branch),320,322,324,(325,take the False branch),(326,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="993">
  <name>
   RED-cmp-never
  </name>
  <location line="830" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gdef.c">
   <explanation>
   function or method: HB_GDEF_Build_ClassDefinition
   line-by-line trace: 789,790,791,793,794,795,(798,take the False branch),(798,take the False branch),(798,take the False branch),801,805,807,808,810,811,812,(814,take the False branch),820,(822,take the True branch),(824,take the True branch),(824,take the True branch),(826,take the True branch),828,(830,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="994">
  <name>
   RED-cmp-never
  </name>
  <location line="848" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gdef.c">
   <explanation>
   function or method: HB_GDEF_Build_ClassDefinition
   line-by-line trace: 789,790,791,793,794,795,(798,take the False branch),(798,take the False branch),(798,take the False branch),801,805,807,808,810,811,812,(814,take the False branch),820,(822,take the True branch),(824,take the True branch),(824,take the False branch),846,847,846,(848,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="995">
  <name>
   RED-cmp-never
  </name>
  <location line="871" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gdef.c">
   <explanation>
   function or method: HB_GDEF_Build_ClassDefinition
   line-by-line trace: 789,790,791,793,794,795,(798,take the False branch),(798,take the False branch),(798,take the False branch),801,805,807,808,810,811,812,(814,take the False branch),820,(822,take the True branch),(824,take the True branch),(824,take the False branch),846,847,846,(848,take the False branch),(851,take the False branch),857,858,859,(861,take the False branch),(867,take the True branch),869,(871,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="996">
  <name>
   RED-cmp-never
  </name>
  <location line="292" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_SingleSubst
   line-by-line trace: 271,272,273,274,276,(278,take the True branch),(278,take the False branch),(281,take the False branch),284,(285,take the False branch),288,290,291,(292,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="997">
  <name>
   RED-cmp-never
  </name>
  <location line="300" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_SingleSubst
   line-by-line trace: 271,272,273,274,276,(278,take the True branch),(278,take the False branch),(281,take the False branch),284,(285,take the False branch),288,296,(297,take the False branch),299,(300,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="998">
  <name>
   RED-cmp-never
  </name>
  <location line="427" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Load_MultipleSubst
   line-by-line trace: 377,378,380,381,383,386,(388,take the False branch),391,392,394,396,(397,take the False branch),(398,take the False branch),400,(402,take the False branch),405,407,409,(411,take the False branch),414,(416,take the True branch),(418,take the False branch),421,423,425,(426,take the False branch),(427,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="999">
  <name>
   RED-cmp-never
  </name>
  <location line="500" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_MultipleSubst
   line-by-line trace: 476,477,478,479,480,482,(484,take the True branch),(484,take the False branch),(487,take the False branch),490,(491,take the False branch),(494,take the False branch),497,498,(500,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1000">
  <name>
   RED-cmp-never
  </name>
  <location line="625" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Load_AlternateSubst
   line-by-line trace: 575,576,578,579,581,584,(586,take the False branch),589,590,592,594,(595,take the False branch),(596,take the False branch),598,(600,take the False branch),603,605,607,(609,take the False branch),612,(614,take the True branch),(616,take the False branch),619,621,623,(624,take the False branch),(625,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1001">
  <name>
   RED-cmp-never
  </name>
  <location line="704" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_AlternateSubst
   line-by-line trace: 674,675,676,677,678,680,(682,take the True branch),(682,take the False branch),(685,take the False branch),688,(689,take the False branch),692,(696,take the False branch),701,703,(704,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1002">
  <name>
   RED-cmp-never
  </name>
  <location line="811" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Load_LigatureSet
   line-by-line trace: 776,778,779,781,784,(786,take the False branch),789,791,793,(795,take the False branch),798,(800,take the True branch),(802,take the False branch),805,807,809,(810,take the False branch),(811,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1003">
  <name>
   RED-cmp-never
  </name>
  <location line="1027" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_LigatureSubst
   line-by-line trace: 951,952,953,954,955,956,958,960,(962,take the False branch),(965,take the False branch),(965,take the True branch),966,968,(969,take the False branch),(972,take the False branch),975,(977,take the True branch),(981,take the False branch),984,986,(988,take the True branch),(988,take the False branch),(991,take the False branch),(1010,take the True branch),(1010,take the True branch),1014,(1015,take the True branch),1014,(1016,take the True branch),(1016,take the False branch),(1020,take the True branch),(1025,take the True branch),(1027,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1004">
  <name>
   RED-cmp-never
  </name>
  <location line="1034" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_LigatureSubst
   line-by-line trace: 951,952,953,954,955,956,958,960,(962,take the False branch),(965,take the False branch),(965,take the True branch),966,968,(969,take the False branch),(972,take the False branch),975,(977,take the True branch),(981,take the False branch),984,986,(988,take the True branch),(988,take the False branch),(991,take the False branch),(1010,take the True branch),(1010,take the True branch),1014,(1015,take the True branch),1014,(1016,take the True branch),(1016,take the False branch),(1020,take the True branch),(1025,take the False branch),1033,(1034,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1005">
  <name>
   RED-cmp-never
  </name>
  <location line="1042" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_LigatureSubst
   line-by-line trace: 951,952,953,954,955,956,958,960,(962,take the False branch),(965,take the False branch),(965,take the True branch),966,968,(969,take the False branch),(972,take the False branch),975,(977,take the True branch),(981,take the False branch),984,986,(988,take the True branch),(988,take the False branch),(991,take the False branch),(1010,take the True branch),(1010,take the True branch),1014,(1015,take the True branch),1014,(1016,take the True branch),(1016,take the False branch),(1020,take the False branch),1041,(1042,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1006">
  <name>
   RED-cmp-never
  </name>
  <location line="1056" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Lookup_LigatureSubst
   line-by-line trace: 951,952,953,954,955,956,958,960,(962,take the False branch),(965,take the False branch),(965,take the True branch),966,968,(969,take the False branch),(972,take the False branch),975,(977,take the True branch),(981,take the False branch),984,986,(988,take the True branch),(988,take the False branch),(991,take the False branch),(1010,take the True branch),(1010,take the True branch),1014,(1015,take the True branch),1014,(1016,take the True branch),(1016,take the False branch),(1020,take the False branch),1041,(1042,take the False branch),(1052,take the True branch),(1054,take the True branch),(1056,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1007">
  <name>
   RED-cmp-never
  </name>
  <location line="1107" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Do_ContextSubst
   line-by-line trace: 1084,1085,1088,(1090,take the True branch),(1092,take the True branch),(1092,take the True branch),1094,1098,1101,1102,1103,(1105,take the True branch),(1107,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1008">
  <name>
   RED-cmp-never
  </name>
  <location line="1118" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: Do_ContextSubst
   line-by-line trace: 1084,1085,1088,(1090,take the True branch),(1092,take the False branch),(1118,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1009">
  <name>
   RED-cmp-never
  </name>
  <location line="4160" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-gsub.c">
   <explanation>
   function or method: GSUB_Do_String_Lookup
   line-by-line trace: 4122,4124,4125,4127,4129,4131,4133,4134,4135,4136,4137,4138,4141,4142,(4143,take the True branch),(4145,take the True branch),4147,(4148,take the True branch),(4150,take the False branch),(4159,take the True branch),(4160,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1010">
  <name>
   RED-cmp-never
  </name>
  <location line="108" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-open.c">
   <explanation>
   function or method: Load_Script
   line-by-line trace: 87,88,89,91,94,(96,take the False branch),99,101,(103,take the True branch),105,(106,take the False branch),107,(108,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1011">
  <name>
   RED-cmp-never
  </name>
  <location line="157" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-open.c">
   <explanation>
   function or method: Load_Script
   line-by-line trace: 87,88,89,91,94,(96,take the False branch),99,101,(103,take the True branch),105,(106,take the False branch),107,(108,take the False branch),110,(122,take the False branch),125,(130,take the False branch),136,138,(140,take the False branch),143,(145,take the True branch),(147,take the False branch),150,151,153,155,(156,take the False branch),(157,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1012">
  <name>
   RED-cmp-never
  </name>
  <location line="396" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-open.c">
   <explanation>
   function or method: _HB_OPEN_Load_FeatureList
   line-by-line trace: 356,358,359,361,364,(366,take the False branch),369,371,373,(375,take the False branch),(377,take the False branch),380,382,(384,take the True branch),(386,take the False branch),389,390,392,394,(395,take the False branch),(396,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1013">
  <name>
   RED-cmp-never
  </name>
  <location line="1011" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-shaper.cpp">
   <explanation>
   function or method: HB_NewFace
   line-by-line trace: 961,(962,take the False branch),965,966,967,968,969,970,971,972,973,974,975,977,978,979,981,(982,take the False branch),(982,take the True branch),984,988,(989,take the False branch),(989,take the False branch),997,999,(1000,take the False branch),(1000,take the False branch),1004,1006,(1008,take the False branch),(1011,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1014">
  <name>
   RED-cmp-never
  </name>
  <location line="1343" path="chrome-5.0.375.70/third_party/icu/source/common/uloc.c">
   <explanation>
   function or method: _getVariantEx
   line-by-line trace: 1315,(1318,take the False branch),(1318,take the False branch),(1340,take the True branch),(1341,take the False branch),(1343,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1015">
  <name>
   RED-cmp-never
  </name>
  <location line="1545" path="chrome-5.0.375.70/third_party/icu/source/common/uloc.c">
   <explanation>
   function or method: uloc_openKeywords_4_2
   line-by-line trace: 1514,1515,1516,(1517,take the False branch),(1517,take the False branch),(1521,take the False branch),1526,(1527,take the False branch),(1527,take the False branch),(1545,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1016">
  <name>
   RED-cmp-never
  </name>
  <location line="1685" path="chrome-5.0.375.70/third_party/icu/source/common/uloc.c">
   <explanation>
   function or method: _canonicalize
   line-by-line trace: 1579,1580,1581,1582,1583,1584,1585,1586,1587,(1589,take the False branch),(1593,take the True branch),1594,1596,(1600,take the True branch),(1601,take the False branch),(1601,take the True branch),1602,1603,1610,(1612,take the False branch),(1620,take the False branch),(1620,take the False branch),(1663,take the True branch),(1663,take the True branch),1664,1665,1666,1667,1668,1669,1670,1671,1678,(1680,take the False branch),(1685,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1017">
  <name>
   RED-cmp-never
  </name>
  <location line="1630" path="chrome-5.0.375.70/third_party/icu/source/common/unames.c">
   <explanation>
   function or method: u_charFromName_4_2
   line-by-line trace: 1543,1544,1545,1546,1547,1548,1549,1550,(1552,take the False branch),(1552,take the False branch),(1556,take the False branch),(1556,take the False branch),(1556,take the False branch),(1561,take the False branch),(1566,take the False branch),1572,(1575,take the False branch),(1582,take the False branch),1626,1627,1628,(1629,take the True branch),(1630,integer constant 65535)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1018">
  <name>
   RED-cmp-never
  </name>
  <location line="2109" path="chrome-5.0.375.70/third_party/icu/source/common/unorm.cpp">
   <explanation>
   function or method: _recompose
   line-by-line trace: 1991,1992,1993,1994,1995,1996,1997,1999,2000,2001,2002,2003,2004,2006,2007,(2008,take the True branch),(2008,take the True branch),(2009,take the False branch),2109,2107,(2103,take the True branch),(2105,take the True branch),(2106,take the False branch),(2106,take the True branch),(2109,function `_Z8_combinePKttRtS1_')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1019">
  <name>
   RED-cmp-never
  </name>
  <location line="637" path="chrome-5.0.375.70/third_party/icu/source/common/utrie.c">
   <explanation>
   function or method: utrie_compact
   line-by-line trace: 589,(591,take the False branch),(591,take the False branch),(596,take the False branch),(600,take the False branch),607,(610,take the True branch),(610,take the True branch),611,56,611,616,56,616,(617,take the True branch),(625,take the False branch),(634,take the True branch),635,(636,take the True branch),77,635,(637,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1020">
  <name>
   RED-cmp-never
  </name>
  <location line="1024" path="chrome-5.0.375.70/third_party/icu/source/common/utrie2_builder.c">
   <explanation>
   function or method: compactData
   line-by-line trace: 986,987,988,991,(992,take the False branch),1000,1001,(1002,take the True branch),1008,88,96,(1008,take the True branch),1009,684,1009,1010,(1014,take the False branch),1023,(1024,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1021">
  <name>
   RED-cmp-never
  </name>
  <location line="1113" path="chrome-5.0.375.70/third_party/icu/source/common/utrie2_builder.c">
   <explanation>
   function or method: compactIndex2
   line-by-line trace: 1093,1096,714,715,718,1096,(1097,take the False branch),1102,725,1102,657,1102,1104,75,725,740,657,740,102,678,657,666,678,681,102,678,657,666,678,681,102,75,(1104,take the True branch),1112,(1113,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1022">
  <name>
   RED-cmp-never
  </name>
  <location line="204" path="chrome-5.0.375.70/third_party/icu/source/common/uvector.cpp">
   <explanation>
   function or method: icu_4_2::UVector::containsNone
   line-by-line trace: (203,take the True branch),(204,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1023">
  <name>
   RED-cmp-never
  </name>
  <location line="122" path="chrome-5.0.375.70/third_party/icu/source/common/uvectr32.cpp">
   <explanation>
   function or method: icu_4_2::UVector32::containsNone
   line-by-line trace: (121,take the True branch),(122,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1024">
  <name>
   RED-cmp-never
  </name>
  <location line="167" path="chrome-5.0.375.70/third_party/icu/source/i18n/csrmbcs.cpp">
   <explanation>
   function or method: icu_4_2::CharsetRecog_mbcs::match_mbcs
   line-by-line trace: 147,148,149,150,151,152,153,(155,take the True branch),156,(158,take the False branch),(161,take the False branch),164,(166,take the True branch),(167,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1025">
  <name>
   RED-cmp-never
  </name>
  <location line="643" path="chrome-5.0.375.70/third_party/libevent/evrpc.c">
   <explanation>
   function or method: evrpc_pool_schedule
   line-by-line trace: 636,637,(640,take the False branch),(643,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1026">
  <name>
   RED-cmp-never
  </name>
  <location line="2198" path="chrome-5.0.375.70/third_party/libevent/http.c">
   <explanation>
   function or method: evhttp_handle_request
   line-by-line trace: 2190,2191,(2193,take the False branch),(2198,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1027">
  <name>
   RED-cmp-never
  </name>
  <location line="3256" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseAttValueComplex
   line-by-line trace: 3221,3222,3223,3224,3225,3226,3227,3228,(3230,take the True branch),3231,3232,3233,3246,3247,(3248,take the False branch),3253,3254,3255,(3254,take the True branch),(3255,take the False branch),(3255,take the True branch),(3255,take the False branch),(3255,take the True branch),(3255,take the False branch),(3255,take the True branch),(3255,take the True branch),(3256,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1028">
  <name>
   RED-cmp-never
  </name>
  <location line="5163" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseAttributeListDecl
   line-by-line trace: 5104,5105,5106,(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),(5108,take the True branch),5109,(5111,take the True branch),(5111,take the False branch),(5112,take the False branch),(5112,take the True branch),(5112,take the True branch),(5112,take the True branch),5113,5116,5117,(5118,take the False branch),5123,(5124,take the True branch),(5124,take the True branch),(5125,take the True branch),5126,5127,5128,5129,(5131,take the True branch),(5131,take the False branch),5132,5133,(5134,take the False branch),(5139,take the True branch),(5139,take the True branch),(5140,take the False branch),(5140,take the True branch),(5140,take the False branch),(5140,take the False branch),5145,5147,(5148,take the False branch),(5152,take the True branch),(5152,take the True branch),(5153,take the True branch),(5153,take the False branch),5160,5162,(5163,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1029">
  <name>
   RED-cmp-never
  </name>
  <location line="683" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlCurrentChar
   line-by-line trace: (615,take the False branch),(615,take the False branch),(615,take the False branch),616,113,(616,take the False branch),(619,take the True branch),(619,take the False branch),(623,take the True branch),635,636,637,639,(640,take the True branch),(641,take the False branch),(641,take the False branch),(643,take the True branch),644,(645,take the False branch),(647,take the True branch),(648,take the True branch),649,(650,take the False branch),(652,take the False branch),668,669,670,671,(672,take the False branch),(683,take the True branch),(683,take the True branch),(683,integer constant 10)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1030">
  <name>
   RED-cmp-never
  </name>
  <location line="683" path="chrome-5.0.375.70/third_party/libxml/parserInternals.c">
   <explanation>
   function or method: xmlCurrentChar
   line-by-line trace: (615,take the False branch),(615,take the False branch),(615,take the False branch),616,113,(616,take the False branch),(619,take the True branch),(619,take the False branch),(623,take the True branch),635,636,637,639,(640,take the True branch),(641,take the False branch),(641,take the False branch),(643,take the True branch),644,(645,take the False branch),(647,take the True branch),(648,take the True branch),649,(650,take the False branch),(652,take the False branch),668,669,670,671,(672,take the False branch),(683,take the True branch),(683,take the True branch),(683,take the False branch),(683,integer constant 13)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1031">
  <name>
   RED-cmp-never
  </name>
  <location line="9242" path="chrome-5.0.375.70/third_party/libxml/relaxng.c">
   <explanation>
   function or method: xmlRelaxNGValidateInterleave
   line-by-line trace: 9103,9104,9105,9107,9108,9109,9110,9111,(9113,take the True branch),9114,9115,9123,(9124,take the False branch),9156,(9157,take the False branch),9161,9162,(9163,take the False branch),9167,9173,9174,9175,(9176,take the False branch),9240,(9242,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1032">
  <name>
   RED-cmp-never
  </name>
  <location line="7987" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlDOMWrapNSNormDeclareNsForced
   line-by-line trace: 7974,7975,7976,7977,7981,7982,(7986,take the True branch),(7987,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1033">
  <name>
   RED-cmp-never
  </name>
  <location line="4017" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlRegExecPushStringInternal
   line-by-line trace: 3723,3724,3725,3726,3727,(3729,take the False branch),(3731,take the False branch),(3733,take the False branch),(3736,take the False branch),(3739,take the True branch),(3740,take the False branch),3742,(3752,take the False branch),(3761,take the True branch),(3762,take the False branch),(3763,take the True branch),(3764,take the True branch),(3771,take the True branch),(3771,take the False branch),3774,(3775,take the True branch),3776,(3777,take the False branch),3779,3780,(3781,take the False branch),(3819,take the False branch),(3844,take the True branch),3845,3846,3852,3853,(3858,take the False branch),(3947,take the False branch),(4017,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1034">
  <name>
   RED-cmp-never
  </name>
  <location line="6014" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlAutomataNewOnceTrans2
   line-by-line trace: 6007,6008,(6010,take the False branch),(6010,take the False branch),(6010,take the False branch),(6012,take the False branch),(6014,take the False branch),(6014,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1035">
  <name>
   RED-cmp-never
  </name>
  <location line="6093" path="chrome-5.0.375.70/third_party/libxml/xmlregexp.c">
   <explanation>
   function or method: xmlAutomataNewOnceTrans
   line-by-line trace: 6086,6087,(6089,take the False branch),(6089,take the False branch),(6089,take the False branch),(6091,take the False branch),(6093,take the False branch),(6093,integer constant 1)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1036">
  <name>
   RED-cmp-never
  </name>
  <location line="3490" path="chrome-5.0.375.70/third_party/libxslt/libxslt/xslt.c">
   <explanation>
   function or method: xsltPrecomputeStylesheet
   line-by-line trace: 3419,3420,(3422,take the False branch),(3422,take the False branch),(3425,take the True branch),(3425,take the False branch),3429,(3431,take the True branch),(3431,take the True branch),(3431,take the True branch),(3431,take the False branch),3435,3443,(3444,take the True branch),(3445,take the True branch),3450,3451,3452,(3454,take the True branch),3455,(3459,take the True branch),(3459,take the False branch),(3486,take the True branch),(3486,take the True branch),(3486,take the True branch),3487,3488,(3489,take the True branch),(3490,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1037">
  <name>
   RED-cmp-never
  </name>
  <location line="589" path="chrome-5.0.375.70/third_party/skia/src/core/SkMatrix.cpp">
   <explanation>
   function or method: SkMatrix::setConcat
   line-by-line trace: 533,534,(536,take the False branch),(538,take the False branch),541,(543,take the False branch),576,577,(576,take the False branch),580,581,(580,take the False branch),584,585,(584,take the False branch),589,588,(589,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1038">
  <name>
   RED-cmp-never
  </name>
  <location line="606" path="chrome-5.0.375.70/third_party/skia/src/core/SkMatrix.cpp">
   <explanation>
   function or method: SkMatrix::setConcat
   line-by-line trace: 533,534,(536,take the False branch),(538,take the False branch),541,(543,take the False branch),576,577,(576,take the False branch),580,581,(580,take the False branch),584,585,(584,take the False branch),589,588,(589,take the False branch),593,594,(593,take the False branch),597,598,(597,take the False branch),601,602,(601,take the False branch),606,605,(606,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1039">
  <name>
   RED-cmp-never
  </name>
  <location line="47" path="chrome-5.0.375.70/third_party/skia/src/ports/SkThread_pthread.cpp">
   <explanation>
   function or method: SkMutex::SkMutex
   line-by-line trace: 45,(47,sizeof a field of `this')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1040">
  <name>
   RED-cmp-never
  </name>
  <location line="357" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2_tokenizer.c">
   <explanation>
   function or method: sqlite3Fts2InitHashTable
   line-by-line trace: 342,343,344,345,346,359,358,(357,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1041">
  <name>
   RED-cmp-never
  </name>
  <location line="7861" path="chrome-5.0.375.70/third_party/sqlite/src/btree.c">
   <explanation>
   function or method: sqlite3Poison
   line-by-line trace: 7819,7820,7821,7822,(7824,take the False branch),(7827,take the False branch),7828,7829,(7840,take the True branch),7845,(7847,take the False branch),7853,7854,7855,(7856,take the False branch),(7861,integer constant 16)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1042">
  <name>
   RED-cmp-never
  </name>
  <location line="7862" path="chrome-5.0.375.70/third_party/sqlite/src/btree.c">
   <explanation>
   function or method: sqlite3Poison
   line-by-line trace: 7819,7820,7821,7822,(7824,take the False branch),(7827,take the False branch),7828,7829,(7840,take the True branch),7845,(7847,take the False branch),7853,7854,7855,(7856,take the False branch),(7861,take the False branch),(7862,sizeof `zMagicHeader')
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1043">
  <name>
   RED-cmp-never
  </name>
  <location line="390" path="chrome-5.0.375.70/third_party/sqlite/src/printf.c">
   <explanation>
   function or method: sqlite3VXPrintf
   line-by-line trace: 236,237,238,239,240,241,242,243,244,245,246,247,248,249,250,251,252,253,254,255,256,257,259,260,261,262,263,264,267,268,(269,take the True branch),(270,take the True branch),271,272,273,(274,take the True branch),(274,take the False branch),275,(276,take the False branch),(278,take the False branch),283,284,283,285,286,287,288,294,(296,take the True branch),(296,take the False branch),298,(299,take the True branch),300,(301,take the True branch),302,303,305,(312,take the True branch),313,(316,take the True branch),317,318,(319,take the True branch),320,(321,take the True branch),322,(333,take the True branch),334,335,(336,take the True branch),337,338,346,347,(348,take the True branch),(349,take the True branch),350,(351,take the False branch),(351,take the True branch),352,356,359,(363,take the True branch),(363,take the False branch),388,389,(390,sizeof a )
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1044">
  <name>
   RED-cmp-never
  </name>
  <location line="213" path="chrome-5.0.375.70/third_party/sqlite/src/vdbeblob.c">
   <explanation>
   function or method: sqlite3_blob_open
   line-by-line trace: 48,49,66,83,84,85,86,87,89,90,91,(92,take the False branch),96,97,98,100,107,108,(109,take the True branch),(109,take the False branch),(114,take the True branch),(114,take the True branch),115,116,(119,take the False branch),(132,take the True branch),(133,take the True branch),134,(137,take the False branch),(150,take the False branch),168,(169,take the True branch),170,171,172,175,176,179,180,183,186,187,188,189,193,194,195,204,205,(206,take the True branch),207,211,212,(213,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1045">
  <name>
   RED-cmp-never
  </name>
  <location line="1968" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Value::StrictEquals
   line-by-line trace: 1956,(1955,take the False branch),(1955,take the False branch),(1956,take the False branch),(1959,take the True branch),(1959,take the False branch),1960,1961,(1963,take the True branch),(1964,take the False branch),1965,1966,(1968,take the True branch),(1968,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1046">
  <name>
   RED-cmp-never
  </name>
  <location line="1968" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Value::StrictEquals
   line-by-line trace: 1956,(1955,take the False branch),(1955,take the False branch),(1956,take the False branch),(1959,take the True branch),(1959,take the False branch),1960,1961,(1963,take the True branch),(1964,take the False branch),1965,1966,(1968,take the True branch),(1968,take the True branch),(1968,take the True branch),(1968,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1047">
  <name>
   RED-cmp-never
  </name>
  <location line="3366" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Date::New
   line-by-line trace: 3364,(3365,take the True branch),(3365,take the False branch),(3366,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1048">
  <name>
   RED-cmp-never
  </name>
  <location line="3442" path="chrome-5.0.375.70/v8/src/api.cc">
   <explanation>
   function or method: v8::Number::New
   line-by-line trace: 3441,(3442,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1049">
  <name>
   RED-cmp-never
  </name>
  <location line="643" path="chrome-5.0.375.70/v8/src/conversions.cc">
   <explanation>
   function or method: v8::internal::DoubleToCString
   line-by-line trace: 641,(643,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1050">
  <name>
   RED-cmp-never
  </name>
  <location line="433" path="chrome-5.0.375.70/v8/src/execution.cc">
   <explanation>
   function or method: v8::internal::Execution::ToBoolean
   line-by-line trace: (425,take the False branch),426,(427,take the False branch),(429,take the False branch),(429,take the False branch),(431,take the True branch),432,(433,take the False branch),(433,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1051">
  <name>
   RED-cmp-never
  </name>
  <location line="366" path="chrome-5.0.375.70/v8/src/full-codegen.cc">
   <explanation>
   function or method: v8::internal::FullCodeGenSyntaxChecker::VisitCallRuntime
   line-by-line trace: (365,take the True branch),(366,integer constant 0)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1052">
  <name>
   RED-cmp-never
  </name>
  <location line="1574" path="chrome-5.0.375.70/v8/src/heap.cc">
   <explanation>
   function or method: v8::internal::Heap::CreateInitialObjects
   line-by-line trace: 1568,1571,(1572,take the False branch),1573,(1574,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1053">
  <name>
   RED-cmp-never
  </name>
  <location line="54" path="chrome-5.0.375.70/v8/src/ia32/register-allocator-ia32.cc">
   <explanation>
   function or method: v8::internal::Result::ToRegister
   line-by-line trace: 41,(42,take the True branch),43,44,(45,take the True branch),46,(47,take the False branch),(51,take the True branch),52,53,(54,take the True branch),(54,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1054">
  <name>
   RED-cmp-never
  </name>
  <location line="103" path="chrome-5.0.375.70/v8/src/ia32/register-allocator-ia32.cc">
   <explanation>
   function or method: v8::internal::Result::ToRegister
   line-by-line trace: 86,(87,take the True branch),88,89,(90,take the False branch),93,(94,take the True branch),(95,take the False branch),100,101,102,(103,take the True branch),(103,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1055">
  <name>
   RED-cmp-never
  </name>
  <location line="1151" path="chrome-5.0.375.70/v8/src/objects.cc">
   <explanation>
   function or method: v8::internal::HeapNumber::HeapNumberToBoolean
   line-by-line trace: (1151,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1056">
  <name>
   RED-cmp-never
  </name>
  <location line="169" path="chrome-5.0.375.70/v8/src/platform-linux.cc">
   <explanation>
   function or method: v8::internal::OS::LocalTimezone
   line-by-line trace: (169,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1057">
  <name>
   RED-cmp-never
  </name>
  <location line="103" path="chrome-5.0.375.70/v8/src/platform-posix.cc">
   <explanation>
   function or method: v8::internal::OS::DaylightSavingsOffset
   line-by-line trace: (103,sizeof a float)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1058">
  <name>
   RED-cmp-never
  </name>
  <location line="974" path="chrome-5.0.375.70/webkit/glue/plugins/webplugin_impl.cc">
   <explanation>
   function or method: webkit_glue::WebPluginImpl::HandleURLRequestInternal
   line-by-line trace: 936,937,(940,take the False branch),(943,take the False branch),957,(958,take the False branch),961,(963,take the False branch),966,(968,take the False branch),(973,take the False branch),(974,integer constant 3)
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Comparison never holds
   </textoutput>
  </output>
 </weakness>
 <weakness id="1059">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="43" path="chrome-5.0.375.70/native_client/src/trusted/plugin/srpc/method_map.cc">
   <explanation>
   function or method: nacl_srpc::MethodInfo::TypeName
   line-by-line trace: 41,(43,uv_pointer_assign of variable `str'),44
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `str' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1060">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="70" path="chrome-5.0.375.70/third_party/WebKit/WebCore/css/MediaQueryExp.cpp">
   <explanation>
   function or method: WebCore::MediaQueryExp::MediaQueryExp
   line-by-line trace: 37,(41,take the True branch),(42,take the False branch),(54,take the True branch),58,59,60,(62,uv_pointer_assign of variable `value'),(62,take the True branch),(63,read of variable `value'),(63,take the False branch),(65,read of variable `value'),(65,take the False branch),68,(70,uv_pointer_assign of variable `value'),62
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `value' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1061">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="787" path="chrome-5.0.375.70/third_party/WebKit/WebCore/editing/ApplyStyleCommand.cpp">
   <explanation>
   function or method: WebCore::ApplyStyleCommand::cleanupUnstyledAppleStyleSpans
   line-by-line trace: (775,take the False branch),782,(783,read of variable `node'),(784,read of variable `node'),(785,read of variable `node'),(785,take the False branch),(787,uv_pointer_assign of variable `node'),783
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `node' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1062">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="591" path="chrome-5.0.375.70/third_party/icu/source/common/locid.cpp">
   <explanation>
   function or method: icu_4_2::Locale::init
   line-by-line trace: 533,(535,take the True branch),536,537,(540,take the False branch),548,549,550,551,552,553,554,555,(557,take the False branch),563,566,(567,take the False branch),569,567,568,567,(571,take the True branch),573,(574,take the False branch),578,(579,take the True branch),580,579,(583,take the False branch),609,(583,take the False branch),588,(591,uv_pointer_assign of variable `separator'),592
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `separator' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1063">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="1333" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlStringLenGetNodeList
   line-by-line trace: 1242,1243,1244,1245,1246,1247,(1249,take the False branch),(1251,uv_pointer_assign of variable `q'),(1252,take the True branch),(1252,take the True branch),(1253,take the True branch),1254,1255,(1260,read of variable `q'),(1275,uv_pointer_assign of variable `q'),(1276,take the False branch),(1304,take the False branch),1332,(1333,uv_pointer_assign of variable `q'),(1334,take the True branch),(1334,take the True branch),(1334,take the True branch)
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `q' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1064">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="1512" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlStringGetNodeList
   line-by-line trace: 1439,1440,1441,1442,1443,1444,(1446,take the False branch),(1448,uv_pointer_assign of variable `q'),(1449,take the True branch),(1450,take the True branch),1451,1452,(1457,read of variable `q'),(1472,uv_pointer_assign of variable `q'),(1473,take the False branch),(1495,take the True branch),1496,1497,(1498,take the True branch),(1499,take the False branch),1502,1504,1505,1508,(1510,take the False branch),(1512,uv_pointer_assign of variable `q'),(1574,take the False branch),(1449,take the True branch),(1450,take the False branch),1592,1449
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `q' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1065">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="240" path="chrome-5.0.375.70/third_party/libxslt/libxslt/extra.c">
   <explanation>
   function or method: xsltFunctionLocalTime
   line-by-line trace: 173,174,175,176,177,178,179,180,(182,take the False branch),189,(191,take the True branch),192,(194,take the False branch),199,202,203,204,205,207,208,209,210,212,213,214,215,217,218,219,220,222,223,224,225,227,228,229,230,233,(240,uv_pointer_assign of variable `local_tm'),246
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `local_tm' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1066">
  <name>
   RED-unused-val-ptr
  </name>
  <location line="3544" path="chrome-5.0.375.70/third_party/sqlite/src/where.c">
   <explanation>
   function or method: sqlite3WhereBegin
   line-by-line trace: 3416,3417,3418,3419,3420,3421,3422,3423,3424,3425,3426,3427,(3432,take the False branch),3444,3445,3446,3447,3448,3446,(3451,take the False branch),3454,3455,3456,3457,3458,3459,3460,3465,3466,3467,3468,(3473,take the True branch),(3473,take the False branch),(3473,take the True branch),3474,3475,3494,(3495,take the False branch),3519,(3520,take the False branch),3539,3540,(3541,uv_pointer_assign of variable `pLevel'),3542,(3544,uv_pointer_assign of variable `pLevel'),(3544,take the True branch),3545,3546,3547,3548,3549,3550,3552,3553,(3587,take the True branch),(3587,take the True branch),(3588,take the True branch),3589,(3590,take the False branch),3622,3587
   </explanation>
  </location>
  <grade severity="5" probability="0.4"/>
  <output>
   <textoutput>
   Value assigned to pointer variable `pLevel' is never used
   </textoutput>
  </output>
 </weakness>
 <weakness id="1067">
  <name>
   RED-unused-var-all
  </name>
  <location line="144" path="chrome-5.0.375.70/chrome/browser/safe_browsing/safe_browsing_store.cc">
   <explanation>
   function or method: SBProcessSubs
   line-by-line trace: 150
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `removed_full_adds' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1068">
  <name>
   RED-unused-var-all
  </name>
  <location line="1008" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_ServerHandleSessionTicketXtn
   line-by-line trace: 1068
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ssl3stats' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1069">
  <name>
   RED-unused-var-all
  </name>
  <location line="615" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: (1656,take the True branch),1657,(1656,take the False branch),(1665,take the False branch),1685,1686,(1687,take the False branch),(1687,take the False branch),1691,614,(615,declaration of `negateClass'),616,617,618,619,620,621,622,623,(627,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the True branch),634,1449,1450,(1452,take the True branch),1453,1471,1472,1473,1699,1700,1701
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `negateClass' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1070">
  <name>
   RED-unused-var-all
  </name>
  <location line="617" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: (1656,take the True branch),1657,(1656,take the False branch),(1665,take the False branch),1685,1686,(1687,take the False branch),(1687,take the False branch),1691,614,615,616,(617,declaration of `classCharCount'),618,619,620,621,622,623,(627,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the True branch),634,1449,1450,(1452,take the True branch),1453,1471,1472,1473,1699,1700,1701
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `classCharCount' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1071">
  <name>
   RED-unused-var-all
  </name>
  <location line="618" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: (1656,take the True branch),1657,(1656,take the False branch),(1665,take the False branch),1685,1686,(1687,take the False branch),(1687,take the False branch),1691,614,615,616,617,(618,declaration of `classLastChar'),619,620,621,622,623,(627,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the True branch),634,1449,1450,(1452,take the True branch),1453,1471,1472,1473,1699,1700,1701
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `classLastChar' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1072">
  <name>
   RED-unused-var-all
  </name>
  <location line="622" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: (762,take the True branch),763,(762,take the False branch),764,928,(736,take the True branch),(736,take the False branch),(946,take the True branch),(946,take the True branch),(946,take the False branch),(946,take the False branch),(972,take the False branch),973,974,(980,take the True branch),(980,take the True branch),981,982,983,(984,take the False branch),(989,take the False branch),998,999,1000,1005,1006,1691,614,615,616,617,618,619,620,621,(622,declaration of `mcLength'),623,(627,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the True branch),634,1449,1450,(1452,take the True branch),1453,1471,1472,1473,1699,1700,1701
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `mcLength' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1073">
  <name>
   RED-unused-var-all
  </name>
  <location line="623" path="chrome-5.0.375.70/third_party/WebKit/JavaScriptCore/pcre/pcre_compile.cpp">
   <explanation>
   function or method: compileBranch
   line-by-line trace: (762,take the True branch),763,(762,take the False branch),764,928,(736,take the True branch),(736,take the False branch),(946,take the True branch),(946,take the True branch),(946,take the False branch),(946,take the False branch),(972,take the False branch),973,974,(980,take the True branch),(980,take the True branch),981,982,983,(984,take the False branch),(989,take the False branch),998,999,1000,1005,1006,1691,614,615,616,617,618,619,620,621,622,(623,declaration of `mcbuffer'),(627,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the False branch),(632,take the True branch),634,1449,1450,(1452,take the True branch),1453,1471,1472,1473,1699,1700,1701
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `mcbuffer' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1074">
  <name>
   RED-unused-var-all
  </name>
  <location line="51" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/faanidct.c">
   <explanation>
   function or method: p8idct
   line-by-line trace: (56,take the True branch),57,58,59,60,62,63,70,71,74,75,76,78,79,80,81,83,84,86,87,88,89,(91,take the False branch),(100,take the False branch),(109,take the True branch),110,111,112,113,114,115,116,117,(56,take the False branch),126
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `tmp0' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1075">
  <name>
   RED-unused-var-all
  </name>
  <location line="85" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/fft.c">
   <explanation>
   function or method: ff_fft_init
   line-by-line trace: (128,take the True branch),129,130,131,132,133,(128,take the False branch),136,137,138,139,(140,take the True branch),141,170,171,172,173,174,175
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `has_vectors' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1076">
  <name>
   RED-unused-var-all
  </name>
  <location line="43" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 70
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `eax' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1077">
  <name>
   RED-unused-var-all
  </name>
  <location line="43" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 70
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ebx' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1078">
  <name>
   RED-unused-var-all
  </name>
  <location line="43" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 70
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `edx' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1079">
  <name>
   RED-unused-var-all
  </name>
  <location line="305" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: put_signed_pixels_clamped_mmx
   line-by-line trace: 305
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `line_skip3' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1080">
  <name>
   RED-unused-var-all
  </name>
  <location line="602" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: add_hfyu_median_prediction_cmov
   line-by-line trace: 630
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `x' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1081">
  <name>
   RED-unused-var-all
  </name>
  <location line="605" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: add_hfyu_median_prediction_cmov
   line-by-line trace: 630
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `t' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1082">
  <name>
   RED-unused-var-all
  </name>
  <location line="1632" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: put_mpeg4_qpel16_h_lowpass_mmx2
   line-by-line trace: 1632
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `temp' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1083">
  <name>
   RED-unused-var-all
  </name>
  <location line="1633" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: avg_mpeg4_qpel16_h_lowpass_mmx2
   line-by-line trace: 1633
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `temp' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1084">
  <name>
   RED-unused-var-all
  </name>
  <location line="1634" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: put_no_rnd_mpeg4_qpel16_h_lowpass_mmx2
   line-by-line trace: 1634
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `temp' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1085">
  <name>
   RED-unused-var-all
  </name>
  <location line="2018" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/dsputil_mmx.c">
   <explanation>
   function or method: ac3_downmix_sse
   line-by-line trace: 2044
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `k' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1086">
  <name>
   RED-unused-var-all
  </name>
  <location line="76" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/fft_sse.c">
   <explanation>
   function or method: ff_imdct_half_sse
   line-by-line trace: (87,take the True branch),(87,take the False branch),132,148,149
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `i' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1087">
  <name>
   RED-unused-var-all
  </name>
  <location line="76" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/fft_sse.c">
   <explanation>
   function or method: ff_imdct_half_sse
   line-by-line trace: (87,take the True branch),(87,take the False branch),132,148,149
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `l' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1088">
  <name>
   RED-unused-var-all
  </name>
  <location line="111" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/vp3dsp_mmx.c">
   <explanation>
   function or method: ff_vp3_h_loop_filter_mmx2
   line-by-line trace: 111
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `tmp' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1089">
  <name>
   RED-unused-var-all
  </name>
  <location line="41" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavutil/log.c">
   <explanation>
   function or method: av_log_default_callback
   line-by-line trace: 63
   </explanation>
  </location>
  <grade severity="5" probability="0.8"/>
  <output>
   <textoutput>
   Variable `buf' is unused on all paths
   </textoutput>
  </output>
 </weakness>
 <weakness id="1090">
  <name>
   SEM-const-call
  </name>
  <location line="79" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavutil/rational.c">
   <explanation>
   function or method: av_mul_q
   line-by-line trace: (79,function `av_reduce')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Non-const function `av_reduce' is called in const function `av_mul_q'
   </textoutput>
  </output>
 </weakness>
 <weakness id="1091">
  <name>
   SEM-const-call
  </name>
  <location line="88" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavutil/rational.c">
   <explanation>
   function or method: av_add_q
   line-by-line trace: (88,function `av_reduce')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Non-const function `av_reduce' is called in const function `av_add_q'
   </textoutput>
  </output>
 </weakness>
 <weakness id="1092">
  <name>
   SEM-const-call
  </name>
  <location line="101" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavutil/rational.c">
   <explanation>
   function or method: av_d2q
   line-by-line trace: 97,(99,take the False branch),100,(101,function `av_reduce')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Non-const function `av_reduce' is called in const function `av_d2q'
   </textoutput>
  </output>
 </weakness>
 <weakness id="1093">
  <name>
   SEM-const-global
  </name>
  <location line="35" path="chrome-5.0.375.70/out/Debug/obj.target/geni/ffmpeg_stubs.cc">
   <explanation>
   function or method: av_rescale_q
   line-by-line trace: (35,reference to variable `av_rescale_q_ptr')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   The global variable `av_rescale_q_ptr' is read or written in a function with the `const' attribute
   </textoutput>
  </output>
 </weakness>
 <weakness id="1094">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="64" path="chrome-5.0.375.70/base/atomicops_internals_x86_gcc.cc">
   <explanation>
   function or method: AtomicOps_Internalx86CPUFeaturesInit
   line-by-line trace: 48,49,50,51,55,56,57,58,59,(64,read of variable `eax'),(65,read of variable `eax'),(66,take the True branch),(67,read of variable `eax'),(68,read of variable `eax'),78,77,(76,take the True branch),(77,take the True branch),(78,take the True branch),(78,take the True branch),79,85
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `eax' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1095">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="65" path="chrome-5.0.375.70/base/dynamic_annotations.cc">
   <explanation>
   function or method: RunningOnValgrind
   line-by-line trace: (65,read of variable `_zzq_result')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `_zzq_result' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1096">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="394" path="chrome-5.0.375.70/base/message_loop.cc">
   <explanation>
   function or method: MessageLoop::DeletePendingTasks
   line-by-line trace: (394,read of variable `_zzq_result'),(394,take the False branch),(379,take the True branch),380,381,(382,take the False branch),(394,read of variable `_zzq_result'),(394,take the True branch),395,(379,take the False branch),399,(400,take the False branch),414,(415,take the False branch),420
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `_zzq_result' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1097">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="407" path="chrome-5.0.375.70/base/message_loop.cc">
   <explanation>
   function or method: MessageLoop::DeletePendingTasks
   line-by-line trace: (379,take the True branch),380,381,(382,take the False branch),(394,take the False branch),(379,take the False branch),399,(400,take the True branch),403,(407,read of variable `_zzq_result'),(407,take the True branch),408,410,(411,take the True branch),412,(400,take the False branch),414,(415,take the False branch),420
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `_zzq_result' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1098">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="69" path="chrome-5.0.375.70/native_client/src/shared/gio/gio_mem.c">
   <explanation>
   function or method: GioMemoryFileRead
   line-by-line trace: 51,52,53,56,(58,take the False branch),(62,take the False branch),65,(69,read of variable `_zzq_result'),70,71,72
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `_zzq_result' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1099">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="20" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetCs
   line-by-line trace: 17,(20,read of variable `seg1')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `seg1' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1100">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="30" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetDs
   line-by-line trace: 27,(30,read of variable `seg1')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `seg1' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1101">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="43" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetEs
   line-by-line trace: 40,(43,read of variable `seg1')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `seg1' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1102">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="56" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetFs
   line-by-line trace: 53,(56,read of variable `seg1')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `seg1' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1103">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="69" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetGs
   line-by-line trace: 66,(69,read of variable `seg1')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `seg1' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1104">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="82" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetSs
   line-by-line trace: 79,(82,read of variable `seg1')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `seg1' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1105">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="91" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetStackPtr
   line-by-line trace: 88,(91,read of variable `esp')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `esp' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1106">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="111" path="chrome-5.0.375.70/native_client/src/trusted/service_runtime/linux/x86/sel_segments.c">
   <explanation>
   function or method: NaClGetEbx
   line-by-line trace: 108,(111,read of variable `ebx')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ebx' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1107">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="235" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/nacl_cpuid.c">
   <explanation>
   function or method: asm_HasCPUID
   line-by-line trace: 207,(235,read of variable `after'),236
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `after' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1108">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="235" path="chrome-5.0.375.70/native_client/src/trusted/validator_x86/nacl_cpuid.c">
   <explanation>
   function or method: asm_HasCPUID
   line-by-line trace: 207,(235,read of variable `before'),236
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `before' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1109">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="576" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/vorbis_dec.c">
   <explanation>
   function or method: vorbis_parse_setup_hdr_floors
   line-by-line trace: (576,take the False branch),(574,take the True branch),(575,take the False branch),(576,read of variable `book_idx'),(576,take the True branch),(577,read of variable `book_idx'),(574,take the False branch),581,587,588,589,587,(590,take the False branch),(470,take the True branch),471,473,(477,take the True branch),478,479,480,482,484,(488,take the False branch),499,(501,take the True branch),502,503,(507,take the True branch),(508,take the True branch)
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `book_idx' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1110">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="1321" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/vorbis_dec.c">
   <explanation>
   function or method: vorbis_residue_decode_internal
   line-by-line trace: (1346,take the True branch),1347,1348,1349,(1346,take the False branch),1384,(1310,take the True branch),1311,(1313,take the True branch),1314,1315,(1317,take the True branch),(1317,take the True branch),1318,1319,(1320,take the False branch),(1321,read of variable `ret'),1320,1322,(1324,take the False branch),(1332,take the True branch),1333,(1334,take the False branch),1384,(1310,take the False branch),1386,1387,(1309,take the False branch),(1286,take the True branch),(1286,take the False branch),(1286,take the False branch),(1280,take the False branch),1391
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ret' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1111">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="69" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 42,43,44,47,(69,read of variable `a'),(75,take the True branch),(77,take the True branch),78,(79,take the True branch),80,82,80,(83,take the True branch),84,(85,take the True branch),86,(87,take the True branch),88,(89,take the True branch),90,(91,take the True branch),92,(99,take the True branch),(101,take the True branch),102,(103,take the False branch),(105,take the True branch),106,(107,take the True branch),108,124
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `a' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1112">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="69" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 42,43,44,47,(69,read of variable `c'),(75,take the True branch),(77,take the True branch),78,(79,take the True branch),80,82,80,(83,take the True branch),84,(85,take the True branch),86,(87,take the True branch),88,(89,take the True branch),90,(91,take the True branch),92,(99,take the True branch),(101,take the True branch),102,(103,take the False branch),(105,take the True branch),106,(107,take the True branch),108,124
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `c' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1113">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="75" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 42,43,44,47,(69,take the False branch),(75,read of variable `max_std_level'),(75,take the True branch),(77,take the True branch),78,(79,take the True branch),80,82,80,(83,take the True branch),84,(85,take the True branch),86,(87,take the True branch),88,(89,take the True branch),90,(91,take the True branch),92,(99,take the True branch),(101,take the True branch),102,(103,take the False branch),(105,take the True branch),106,(107,take the True branch),108,124
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `max_std_level' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1114">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="85" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 42,43,44,47,(69,take the False branch),(75,take the True branch),(77,take the False branch),(79,take the False branch),(83,take the False branch),(85,read of variable `ecx'),(85,take the False branch),(87,read of variable `ecx'),(87,take the False branch),(89,read of variable `ecx'),(89,take the False branch),(91,read of variable `ecx'),(91,take the True branch),92,(99,take the True branch),(101,take the True branch),102,(103,take the False branch),(105,take the True branch),106,(107,take the True branch),108,124
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `ecx' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1115">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="99" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavcodec/x86/cpuid.c">
   <explanation>
   function or method: mm_support
   line-by-line trace: 42,43,44,47,(69,take the False branch),(75,take the False branch),(99,read of variable `max_ext_level'),(99,take the True branch),(101,take the True branch),102,(103,take the False branch),(105,take the True branch),106,(107,take the True branch),108,124
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `max_ext_level' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1116">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="1384" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/utils.c">
   <explanation>
   function or method: av_seek_frame_binary
   line-by-line trace: 1383,(1384,read of variable `pos_max'),(1384,write of variable `pos_max'),1385,1386,1387,1388,(1390,take the False branch),1394,1397,1398,1397,1399,1401,(1402,take the True branch),1403,1405,(1406,take the True branch),1407,(1409,take the False branch),(1409,take the False branch),(1417,take the True branch),1420,(1421,take the True branch),(1422,take the True branch),1423,(1424,take the True branch),(1425,write of variable `pos_max'),1426,(1427,read of variable `pos_max'),(1429,read of variable `pos_max'),(1435,read of variable `pos_max'),(1436,take the False branch),(1440,take the True branch),1441
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `pos_max' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1117">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="1384" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/utils.c">
   <explanation>
   function or method: av_seek_frame_binary
   line-by-line trace: 1383,(1384,read of variable `pos_min'),(1384,write of variable `pos_min'),1385,1386,1387,1388,(1390,take the False branch),1394,1397,1398,1397,1399,1401,(1402,take the True branch),1403,1405,(1406,take the True branch),1407,(1409,take the False branch),(1409,take the False branch),(1417,take the True branch),1420,(1421,take the True branch),(1422,take the True branch),1423,(1424,take the True branch),1425,1426,1427,1429,(1435,read of variable `pos_min'),(1436,take the False branch),(1440,take the True branch),1441
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `pos_min' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1118">
  <name>
   SPC-uninit-var-all
  </name>
  <location line="63" path="chrome-5.0.375.70/v8/src/ia32/cpu-ia32.cc">
   <explanation>
   function or method: v8::internal::CPU::FlushICache
   line-by-line trace: (63,read of variable `_zzq_result')
   </explanation>
  </location>
  <grade severity="3" probability="0.8"/>
  <output>
   <textoutput>
   Variable `_zzq_result' is uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1119">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="137" path="chrome-5.0.375.70/base/message_loop.cc">
   <explanation>
   function or method: MessageLoop::~MessageLoop
   line-by-line trace: 113,(114,take the False branch),(117,take the False branch),(120,take the True branch),128,(129,take the False branch),135,(137,read of variable `did_work')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `did_work' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1120">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="183" path="chrome-5.0.375.70/base/process_util_linux.cc">
   <explanation>
   function or method: base::NamedProcessIterator::CheckForNextProcess
   line-by-line trace: 118,119,120,124,125,(126,take the False branch),171,(177,take the False branch),182,(183,read of variable `closeparen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `closeparen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1121">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="187" path="chrome-5.0.375.70/base/process_util_linux.cc">
   <explanation>
   function or method: base::NamedProcessIterator::CheckForNextProcess
   line-by-line trace: 118,119,120,124,125,(126,take the False branch),171,(177,take the False branch),182,183,(187,read of variable `openparen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `openparen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1122">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="382" path="chrome-5.0.375.70/base/process_util_posix.cc">
   <explanation>
   function or method: base::AlterEnvironment
   line-by-line trace: 351,352,(355,take the False branch),362,361,362,(361,take the True branch),363,364,(366,take the False branch),375,(380,take the True branch),381,(382,read of variable `pair')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `pair' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1123">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="167" path="chrome-5.0.375.70/chrome/browser/privacy_blacklist/blacklist.cc">
   <explanation>
   function or method: Blacklist::LoadEntryPreference
   line-by-line trace: 155,(156,take the True branch),(157,take the False branch),159,160,161,162,164,(163,take the True branch),164,(163,take the False branch),(163,take the False branch),(167,read of variable `is_exception')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `is_exception' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1124">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="168" path="chrome-5.0.375.70/chrome/browser/privacy_blacklist/blacklist.cc">
   <explanation>
   function or method: Blacklist::LoadEntryPreference
   line-by-line trace: 155,(156,take the True branch),(157,take the False branch),159,160,161,162,164,(163,take the False branch),(163,take the False branch),167,(168,read of variable `attributes')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `attributes' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1125">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="183" path="chrome-5.0.375.70/chrome/browser/privacy_blacklist/blacklist.cc">
   <explanation>
   function or method: Blacklist::LoadProviderPreference
   line-by-line trace: 177,178,(179,take the False branch),(179,take the False branch),182,(183,read of variable `entries')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `entries' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1126">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="173" path="chrome-5.0.375.70/chrome/browser/renderer_host/render_sandbox_host_linux.cc">
   <explanation>
   function or method: SandboxIPCProcess::HandleFontMatchRequest
   line-by-line trace: 153,154,155,156,(158,take the False branch),(160,take the False branch),165,(164,take the False branch),(165,take the False branch),(166,take the False branch),170,171,173,175,174,(173,read of variable `fileid')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `fileid' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1127">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="225" path="chrome-5.0.375.70/chrome/common/common_param_traits.cc">
   <explanation>
   function or method: IPC::ParamTraits::Read
   line-by-line trace: 217,218,221,220,(219,take the False branch),218,(223,take the False branch),(225,read of variable `icon_count')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `icon_count' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1128">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="177" path="chrome-5.0.375.70/net/base/transport_security_state.cc">
   <explanation>
   function or method: net::TransportSecurityState::ParseHeader
   line-by-line trace: (98,take the True branch),(99,take the True branch),101,110,112,113,94,113,(114,take the False branch),171,176,(177,read of variable `max_age_candidate')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `max_age_candidate' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1129">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="3666" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3con.c">
   <explanation>
   function or method: ssl3_ComputeHandshakeHashes
   line-by-line trace: 3441,3442,3443,3444,3445,(3447,take the False branch),(3447,take the True branch),(3449,take the False branch),3533,3534,3535,3536,3537,3538,3539,(3541,take the False branch),3546,3547,3546,(3548,take the True branch),3549,155,3549,3550,3652,(3653,take the True branch),3655,3654,(3655,take the True branch),3657,155,3657,3658,104,3658,(3660,take the True branch),3661,(3664,take the True branch),(3666,read of variable `shaStateLen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `shaStateLen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1130">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="890" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_SendNewSessionTicket
   line-by-line trace: 662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,(702,take the True branch),(705,take the False branch),(705,take the True branch),(706,take the False branch),(706,take the True branch),708,(709,take the False branch),713,714,715,(716,take the False branch),(718,take the False branch),722,723,722,(725,take the False branch),(727,take the True branch),(727,take the True branch),729,730,731,760,(761,take the True branch),(761,take the True branch),762,765,767,768,769,770,771,772,773,774,775,776,777,778,779,780,765,781,782,781,783,785,787,788,789,790,791,792,785,(794,take the False branch),797,800,(802,take the False branch),805,(807,take the False branch),810,(812,take the False branch),815,(816,take the False branch),819,(820,take the False branch),821,(822,take the False branch),823,(824,take the False branch),825,(826,take the False branch),829,(830,take the False branch),831,(832,take the False branch),833,(834,take the False branch),835,(836,take the False branch),837,(838,take the False branch),(841,take the False branch),852,(853,take the False branch),857,858,(860,take the False branch),(862,take the True branch),864,(865,take the False branch),867,(868,take the False branch),869,(870,take the False branch),(878,take the True branch),(879,take the False branch),(882,take the False branch),(888,take the True branch),889,(890,read of variable `aes_key')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `aes_key' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1131">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="890" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_SendNewSessionTicket
   line-by-line trace: 662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,(702,take the True branch),(705,take the False branch),(705,take the True branch),(706,take the False branch),(706,take the True branch),708,(709,take the False branch),713,714,715,(716,take the False branch),(718,take the False branch),722,723,722,(725,take the False branch),(727,take the True branch),(727,take the True branch),729,730,731,760,(761,take the True branch),(761,take the True branch),762,765,767,768,769,770,771,772,773,774,775,776,777,778,779,780,765,781,782,781,783,785,787,788,789,790,791,792,785,(794,take the False branch),797,800,(802,take the False branch),805,(807,take the False branch),810,(812,take the False branch),815,(816,take the False branch),819,(820,take the False branch),821,(822,take the False branch),823,(824,take the False branch),825,(826,take the False branch),829,(830,take the False branch),831,(832,take the False branch),833,(834,take the False branch),835,(836,take the False branch),837,(838,take the False branch),(841,take the False branch),852,(853,take the False branch),857,858,(860,take the False branch),(862,take the True branch),864,(865,take the False branch),867,(868,take the False branch),869,(870,take the False branch),(878,take the True branch),(879,take the False branch),(882,take the False branch),(888,take the True branch),889,(890,read of variable `aes_key_length')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `aes_key_length' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1132">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="921" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_SendNewSessionTicket
   line-by-line trace: 662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,(702,take the True branch),(705,take the False branch),(705,take the True branch),(706,take the False branch),(706,take the True branch),708,(709,take the False branch),713,714,715,(716,take the False branch),(718,take the False branch),722,723,722,(725,take the False branch),(727,take the True branch),(727,take the True branch),729,730,731,760,(761,take the True branch),(761,take the True branch),762,765,767,768,769,770,771,772,773,774,775,776,777,778,779,780,765,781,782,781,783,785,787,788,789,790,791,792,785,(794,take the False branch),797,800,(802,take the False branch),805,(807,take the False branch),810,(812,take the False branch),815,(816,take the False branch),819,(820,take the False branch),821,(822,take the False branch),823,(824,take the False branch),825,(826,take the False branch),829,(830,take the False branch),831,(832,take the False branch),833,(834,take the False branch),835,(836,take the False branch),837,(838,take the False branch),(841,take the False branch),852,(853,take the False branch),857,858,(860,take the False branch),(862,take the True branch),864,(865,take the False branch),867,(868,take the False branch),869,(870,take the False branch),(878,take the True branch),(879,take the False branch),(882,take the False branch),(888,take the False branch),899,900,899,(901,take the False branch),904,906,905,904,907,908,(909,take the False branch),913,914,(917,take the True branch),918,919,(921,read of variable `mac_key')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mac_key' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1133">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="921" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_SendNewSessionTicket
   line-by-line trace: 662,663,664,665,666,667,668,669,670,671,672,673,674,675,676,677,678,679,680,681,682,683,684,685,686,687,688,689,690,691,692,693,694,695,696,697,698,699,(702,take the True branch),(705,take the False branch),(705,take the True branch),(706,take the False branch),(706,take the True branch),708,(709,take the False branch),713,714,715,(716,take the False branch),(718,take the False branch),722,723,722,(725,take the False branch),(727,take the True branch),(727,take the True branch),729,730,731,760,(761,take the True branch),(761,take the True branch),762,765,767,768,769,770,771,772,773,774,775,776,777,778,779,780,765,781,782,781,783,785,787,788,789,790,791,792,785,(794,take the False branch),797,800,(802,take the False branch),805,(807,take the False branch),810,(812,take the False branch),815,(816,take the False branch),819,(820,take the False branch),821,(822,take the False branch),823,(824,take the False branch),825,(826,take the False branch),829,(830,take the False branch),831,(832,take the False branch),833,(834,take the False branch),835,(836,take the False branch),837,(838,take the False branch),(841,take the False branch),852,(853,take the False branch),857,858,(860,take the False branch),(862,take the True branch),864,(865,take the False branch),867,(868,take the False branch),869,(870,take the False branch),(878,take the True branch),(879,take the False branch),(882,take the False branch),(888,take the False branch),899,900,899,(901,take the False branch),904,906,905,904,907,908,(909,take the False branch),913,914,(917,take the True branch),918,919,(921,read of variable `mac_key_length')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mac_key_length' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1134">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="1101" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_ServerHandleSessionTicketXtn
   line-by-line trace: 1004,1005,1006,1007,1008,(1011,take the False branch),1015,(1021,take the False branch),1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,(1057,take the True branch),1058,1059,1060,1063,1064,1067,1066,(1067,take the False branch),(1071,take the False branch),1075,1076,1075,(1078,take the False branch),1088,1087,(1088,take the False branch),(1097,take the True branch),1098,1099,(1101,read of variable `mac_key')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mac_key' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1135">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="1155" path="chrome-5.0.375.70/net/third_party/nss/ssl/ssl3ext.c">
   <explanation>
   function or method: ssl3_ServerHandleSessionTicketXtn
   line-by-line trace: 1004,1005,1006,1007,1008,(1011,take the False branch),1015,(1021,take the False branch),1024,1025,1026,1027,1028,1029,1030,1031,1032,1033,1034,1035,1036,1037,1038,1039,1040,1041,1042,1043,1044,1045,1046,1047,1048,1049,1050,(1057,take the True branch),1058,1059,1060,1063,1064,1067,1066,(1067,take the False branch),(1071,take the False branch),1075,1076,1075,(1078,take the False branch),1088,1087,(1088,take the False branch),(1097,take the False branch),1110,1111,1112,1113,1114,1113,(1115,take the False branch),(1120,take the True branch),1123,1124,1125,1124,(1126,take the False branch),1130,1131,1130,1132,(1133,take the False branch),1137,1136,(1137,take the False branch),1150,1151,1150,(1153,take the True branch),1154,1155,1156,(1155,read of variable `aes_key')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `aes_key' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1136">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="54" path="chrome-5.0.375.70/skia/ext/SkMemory_new_handler.cpp">
   <explanation>
   function or method: sk_malloc_flags
   line-by-line trace: 48,(49,take the False branch),52,(53,take the True branch),(54,read of variable `old_handler')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `old_handler' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1137">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="352" path="chrome-5.0.375.70/skia/ext/image_operations.cc">
   <explanation>
   function or method: skia::ImageOperations::ResizeSubpixel
   line-by-line trace: 276,277,281,282,283,284,(285,take the True branch),286,289,293,294,295,298,300,(301,take the True branch),(301,take the False branch),305,306,307,306,308,309,310,311,(312,take the True branch),313,314,(315,take the True branch),316,317,334,335,347,349,(352,read of variable `a')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `a' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1138">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="352" path="chrome-5.0.375.70/skia/ext/image_operations.cc">
   <explanation>
   function or method: skia::ImageOperations::ResizeSubpixel
   line-by-line trace: 276,277,281,282,283,284,(285,take the True branch),286,289,293,294,295,298,300,(301,take the True branch),(301,take the False branch),305,306,307,306,308,309,310,311,(312,take the True branch),313,314,(315,take the True branch),316,317,334,335,347,349,(352,read of variable `r')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `r' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1139">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="353" path="chrome-5.0.375.70/skia/ext/image_operations.cc">
   <explanation>
   function or method: skia::ImageOperations::ResizeSubpixel
   line-by-line trace: 276,277,281,282,283,284,(285,take the True branch),286,289,293,294,295,298,300,(301,take the True branch),(301,take the False branch),305,306,307,306,308,309,310,311,(312,take the True branch),313,314,(315,take the True branch),316,317,334,335,347,349,(352,take the True branch),(353,read of variable `g')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `g' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1140">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="354" path="chrome-5.0.375.70/skia/ext/image_operations.cc">
   <explanation>
   function or method: skia::ImageOperations::ResizeSubpixel
   line-by-line trace: 276,277,281,282,283,284,(285,take the True branch),286,289,293,294,295,298,300,(301,take the True branch),(301,take the False branch),305,306,307,306,308,309,310,311,(312,take the True branch),313,314,(315,take the True branch),316,317,334,335,347,349,(352,take the True branch),(353,take the True branch),(354,read of variable `b')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `b' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1141">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="133" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/FontFastPath.cpp">
   <explanation>
   function or method: WebCore::Font::glyphDataForCharacter
   line-by-line trace: (50,take the False branch),52,(53,take the True branch),54,(55,take the True branch),56,57,(61,take the True branch),62,64,(66,take the True branch),(67,take the True branch),68,(69,take the False branch),72,75,(76,take the True branch),(78,take the False branch),93,(133,read of variable `page')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `page' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1142">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="81" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/chromium/SimpleFontDataLinux.cpp">
   <explanation>
   function or method: WebCore::SimpleFontData::platformInit
   line-by-line trace: 56,57,59,60,61,63,64,65,66,68,(69,take the True branch),(69,take the True branch),70,73,(72,take the False branch),75,(80,take the True branch),(81,read of variable `vdmxAscent')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `vdmxAscent' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1143">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="82" path="chrome-5.0.375.70/third_party/WebKit/WebCore/platform/graphics/chromium/SimpleFontDataLinux.cpp">
   <explanation>
   function or method: WebCore::SimpleFontData::platformInit
   line-by-line trace: 56,57,59,60,61,63,64,65,66,68,(69,take the True branch),(69,take the True branch),70,73,(72,take the False branch),75,(80,take the True branch),81,(82,read of variable `vdmxDescent')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `vdmxDescent' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1144">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="79" path="chrome-5.0.375.70/third_party/WebKit/WebCore/xml/XPathNodeSet.cpp">
   <explanation>
   function or method: WebCore::XPath::sortBlock
   line-by-line trace: (46,take the True branch),(46,take the False branch),47,(48,take the False branch),55,56,(57,take the False branch),72,(75,take the True branch),(78,take the True branch),(79,read of variable `commonAncestor')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `commonAncestor' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1145">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="672" path="chrome-5.0.375.70/third_party/WebKit/WebKit/chromium/src/WebGraphicsContext3DDefaultImpl.cpp">
   <explanation>
   function or method: WebKit::WebGraphicsContext3DDefaultImpl::readBackFramebuffer
   line-by-line trace: (636,take the False branch),639,651,(652,take the False branch),(659,take the False branch),665,(672,read of variable `mustRestoreFBO')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mustRestoreFBO' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1146">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="335" path="chrome-5.0.375.70/third_party/cld/encodings/compact_lang_det/getonescriptspan.cc">
   <explanation>
   function or method: ScriptScanner::SkipToFrontOfSpan
   line-by-line trace: 287,288,289,(292,take the True branch),295,(301,take the False branch),(307,take the True branch),(307,take the True branch),(308,take the False branch),(313,take the False branch),(318,take the False branch),(334,take the False branch),(335,read of variable `tlen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tlen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1147">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="457" path="chrome-5.0.375.70/third_party/cld/encodings/compact_lang_det/getonescriptspan.cc">
   <explanation>
   function or method: ScriptScanner::GetOneScriptSpan
   line-by-line trace: 347,348,349,350,351,352,357,358,359,362,363,364,365,369,370,371,(372,take the False branch),381,(386,take the True branch),388,389,(390,take the True branch),(392,take the True branch),(392,take the True branch),(394,take the False branch),(398,take the False branch),(402,take the False branch),(442,take the True branch),(442,take the True branch),(444,take the True branch),445,(454,take the False branch),456,(457,read of variable `plen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `plen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1148">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="503" path="chrome-5.0.375.70/third_party/cld/encodings/compact_lang_det/getonescriptspan.cc">
   <explanation>
   function or method: ScriptScanner::GetOneScriptSpan
   line-by-line trace: 347,348,349,350,351,352,357,358,359,362,363,364,365,369,370,371,(372,take the False branch),381,(386,take the True branch),388,389,(390,take the False branch),462,(467,take the True branch),469,(472,take the False branch),(478,take the True branch),(478,take the True branch),(480,take the False branch),(485,take the False branch),(490,take the False branch),(502,take the False branch),(503,read of variable `tlen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tlen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1149">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="342" path="chrome-5.0.375.70/third_party/ffmpeg/source/patched-ffmpeg-mt/libavformat/oggdec.c">
   <explanation>
   function or method: ogg_packet
   line-by-line trace: 321,322,323,324,325,326,327,333,334,(336,take the False branch),(341,take the True branch),(341,take the True branch),(342,read of variable `poffset')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `poffset' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1150">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="991" path="chrome-5.0.375.70/third_party/harfbuzz/src/harfbuzz-shaper.cpp">
   <explanation>
   function or method: HB_NewFace
   line-by-line trace: 961,(962,take the False branch),965,966,967,968,969,970,971,972,973,974,975,977,978,979,981,(982,take the True branch),984,988,(989,take the True branch),990,(991,read of variable `error')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `error' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1151">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="1985" path="chrome-5.0.375.70/third_party/hunspell/src/hunspell/affixmgr.cxx">
   <explanation>
   function or method: AffixMgr::compound_check
   line-by-line trace: 1553,1554,1555,1556,1557,1558,1559,1560,1561,1562,1563,1564,1565,1566,1567,1568,1570,1572,1574,(1576,take the True branch),1578,1579,1580,(1583,take the False branch),1588,(1590,take the True branch),(1591,take the True branch),(1591,take the False branch),(1592,take the False branch),(1594,take the True branch),1979,(1981,take the False branch),(1985,read of variable `ch')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `ch' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1152">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="4962" path="chrome-5.0.375.70/third_party/icu/source/common/ucnvmbcs.c">
   <explanation>
   function or method: ucnv_SBCSFromUTF8
   line-by-line trace: 4740,4741,4742,4743,4745,4746,4748,4750,4751,4753,4754,4755,4758,4759,4760,4761,4762,4763,4765,4766,(4767,take the False branch),4770,4772,(4774,take the True branch),4776,4781,4784,(4785,take the True branch),4786,4787,4801,4803,(4804,take the True branch),(4804,take the True branch),4805,(4806,take the False branch),(4809,take the True branch),4811,4813,(4818,take the False branch),(4844,take the True branch),(4845,take the True branch),4846,(4847,take the False branch),(4858,take the False branch),(4876,take the False branch),4895,(4898,take the False branch),(4962,read of variable `value')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `value' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1153">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="5252" path="chrome-5.0.375.70/third_party/icu/source/common/ucnvmbcs.c">
   <explanation>
   function or method: ucnv_DBCSFromUTF8
   line-by-line trace: 5036,5037,5038,5039,5041,5042,5044,5046,5047,5049,5050,5051,5052,5055,5056,5057,5058,5059,5060,5062,5063,(5064,take the False branch),5067,5069,(5071,take the True branch),5073,5078,5081,(5082,take the False branch),5086,5098,5100,(5101,take the False branch),5110,(5115,take the True branch),(5115,take the False branch),(5123,take the True branch),(5124,take the True branch),5125,(5126,take the False branch),(5140,take the False branch),(5156,take the True branch),(5158,take the True branch),(5159,take the False branch),5169,(5175,take the False branch),(5252,read of variable `value')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `value' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1154">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="1268" path="chrome-5.0.375.70/third_party/icu/source/common/utext.cpp">
   <explanation>
   function or method: utf8TextAccess
   line-by-line trace: 919,920,921,922,923,(924,take the True branch),925,(932,take the False branch),(958,take the True branch),(959,take the True branch),(961,take the False branch),970,(971,take the True branch),(971,take the False branch),982,(983,take the True branch),(983,take the False branch),(987,take the False branch),(1007,take the False branch),(1007,take the True branch),1009,1168,(1171,take the False branch),1176,1177,1178,1180,1181,(1182,take the True branch),1183,1184,1187,1188,1189,1190,1191,1192,1193,(1196,take the False branch),1236,1243,1244,1247,1248,1249,1250,(1251,take the True branch),1252,1254,1257,1258,1259,1260,1261,1262,(1266,take the True branch),(1266,take the True branch),1267,(1268,read of variable `c')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `c' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1155">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="297" path="chrome-5.0.375.70/third_party/icu/source/i18n/dtfmtsym.cpp">
   <explanation>
   function or method: icu_4_2::DateFormatSymbols::createZoneStrings
   line-by-line trace: 277,278,280,(281,take the False branch),(296,take the True branch),(297,read of variable `row')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `row' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1156">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="2022" path="chrome-5.0.375.70/third_party/icu/source/i18n/dtptngen.cpp">
   <explanation>
   function or method: icu_4_2::DTSkeletonEnumeration::DTSkeletonEnumeration
   line-by-line trace: 1984,1985,1986,1987,1988,1990,1991,(1992,take the False branch),(1996,take the False branch),(2022,take the True branch),(2022,read of variable `curElem')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `curElem' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1157">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="2795" path="chrome-5.0.375.70/third_party/icu/source/i18n/smpdtfmt.cpp">
   <explanation>
   function or method: icu_4_2::SimpleDateFormat::subParse
   line-by-line trace: 2337,2338,2339,2340,2341,2342,2343,2344,(2350,take the False branch),2354,2355,2356,2360,(2361,take the False branch),2364,(2365,take the True branch),2366,2368,2370,2385,2384,2383,2382,2381,2380,2379,2378,2377,(2376,take the False branch),(2377,take the False branch),(2378,take the True branch),(2378,take the False branch),(2379,take the True branch),(2379,take the False branch),(2380,take the True branch),(2380,take the False branch),(2381,take the True branch),(2381,take the False branch),(2382,take the True branch),(2382,take the False branch),(2383,take the True branch),(2383,take the False branch),(2384,take the False branch),(2385,take the False branch),(2386,take the False branch),2425,2650,2651,2652,2653,2655,2656,2660,(2661,take the True branch),2662,(2664,take the False branch),(2730,take the False branch),2748,(2749,take the True branch),2750,2751,2752,2754,2776,2777,(2780,take the True branch),(2780,take the True branch),(2781,take the True branch),2782,2786,2787,2789,2790,(2791,take the True branch),2792,2793,(2795,read of variable `matchLen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `matchLen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1158">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="440" path="chrome-5.0.375.70/third_party/icu/source/i18n/udat.cpp">
   <explanation>
   function or method: udat_getSymbols_4_2
   line-by-line trace: 341,(342,take the False branch),344,345,344,346,347,349,436,(440,read of variable `count')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `count' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1159">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="3802" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_search_4_2
   line-by-line trace: (3736,take the False branch),3757,3756,(3755,take the False branch),(3756,take the False branch),(3757,take the False branch),(3758,take the False branch),(3763,take the True branch),3764,3767,3768,3771,3772,3773,3774,3776,3777,3778,3779,3785,3787,(3790,take the False branch),3798,(3802,take the True branch),(3802,read of variable `targetCEI')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `targetCEI' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1160">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="4022" path="chrome-5.0.375.70/third_party/icu/source/i18n/usearch.cpp">
   <explanation>
   function or method: usearch_searchBackwards_4_2
   line-by-line trace: (3931,take the False branch),3952,3951,(3950,take the False branch),(3951,take the False branch),(3952,take the False branch),(3953,take the False branch),(3958,take the False branch),3962,3963,(3974,take the True branch),3975,3976,3978,3980,(3981,take the True branch),3982,3990,3991,3992,3994,3995,3996,3997,3998,4004,4006,(4009,take the False branch),4018,(4022,take the True branch),(4022,read of variable `targetCEI')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `targetCEI' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1161">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="356" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/thread.cc">
   <explanation>
   function or method: talk_base::Thread::ProcessMessages
   line-by-line trace: 343,(344,take the False branch),346,(348,take the True branch),349,(350,take the False branch),352,(354,take the True branch),355,(356,read of variable `msEnd')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `msEnd' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1162">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="342" path="chrome-5.0.375.70/third_party/libjingle/files/talk/base/virtualsocketserver.cc">
   <explanation>
   function or method: talk_base::VirtualSocketServer::Wait
   line-by-line trace: 324,326,(327,take the False branch),329,331,332,(334,take the True branch),335,(336,take the False branch),338,(340,take the True branch),341,(342,read of variable `msEnd')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `msEnd' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1163">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="2460" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlStringLenDecodeEntities
   line-by-line trace: 2340,2341,2343,2344,2345,2346,2347,2348,(2350,take the False branch),(2350,take the False branch),(2350,take the False branch),2352,(2354,take the False branch),2362,2363,(2364,take the False branch),(2370,take the False branch),2373,2374,2375,(2374,take the True branch),(2374,take the True branch),(2375,take the True branch),(2375,take the True branch),(2377,take the False branch),(2378,take the True branch),(2378,take the False branch),(2386,take the True branch),(2386,take the False branch),(2432,take the True branch),(2432,take the False branch),(2460,read of variable `l')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `l' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1164">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="8930" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseElement
   line-by-line trace: 8865,8866,8867,8868,8869,8870,8871,(8873,take the False branch),(8882,take the True branch),8883,8884,8883,8885,(8888,take the False branch),(8890,take the True branch),8891,8895,(8897,take the False branch),8902,(8904,take the False branch),8908,8909,8918,(8917,take the True branch),(8917,take the True branch),(8917,take the True branch),(8918,take the True branch),(8918,take the True branch),8919,(8925,take the True branch),(8925,take the True branch),(8926,take the True branch),(8926,take the True branch),(8926,take the True branch),(8927,take the True branch),(8928,take the True branch),(8928,take the True branch),(8929,take the True branch),(8930,read of variable `URI')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `URI' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1165">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="8930" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseElement
   line-by-line trace: 8865,8866,8867,8868,8869,8870,8871,(8873,take the False branch),(8882,take the True branch),8883,8884,8883,8885,(8888,take the False branch),(8890,take the True branch),8891,8895,(8897,take the False branch),8902,(8904,take the False branch),8908,8909,8918,(8917,take the True branch),(8917,take the True branch),(8917,take the True branch),(8918,take the True branch),(8918,take the True branch),8919,(8925,take the True branch),(8925,take the True branch),(8926,take the True branch),(8926,take the True branch),(8926,take the True branch),(8927,take the True branch),(8928,take the True branch),(8928,take the True branch),(8929,take the True branch),(8930,read of variable `prefix')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prefix' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1166">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="9004" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseElement
   line-by-line trace: 8865,8866,8867,8868,8869,8870,8871,(8873,take the False branch),(8882,take the True branch),8883,8884,8883,8885,(8888,take the False branch),(8890,take the True branch),8891,8895,(8897,take the False branch),8902,(8904,take the False branch),8908,8909,8918,(8917,take the True branch),(8917,take the True branch),(8917,take the True branch),(8918,take the True branch),(8918,take the True branch),8919,(8925,take the True branch),(8925,take the False branch),(8951,take the True branch),(8952,take the True branch),8983,(8984,take the True branch),(8984,take the False branch),(8984,take the True branch),(8984,take the False branch),(9003,take the True branch),(9004,read of variable `tlen')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tlen' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1167">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="10285" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseTryOrFinish
   line-by-line trace: 9961,9962,9963,9964,(9966,take the False branch),(10022,take the True branch),(10023,take the True branch),10024,10025,10027,10029,(10030,take the True branch),(10030,take the False branch),(10037,take the True branch),(10037,take the False branch),(10040,take the False branch),(10041,take the True branch),10042,10043,10042,(10066,take the False branch),10068,10188,10189,10190,10191,10192,(10194,take the True branch),(10194,take the False branch),10196,(10197,take the False branch),(10204,take the True branch),(10205,take the True branch),(10207,take the False branch),(10207,take the False branch),(10213,take the True branch),10214,(10220,take the False branch),10225,(10227,take the False branch),10241,(10240,take the True branch),(10240,take the True branch),(10240,take the True branch),(10241,take the True branch),(10241,take the True branch),10242,(10248,take the False branch),(10275,take the True branch),10276,(10284,take the True branch),(10285,read of variable `URI')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `URI' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1168">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="10285" path="chrome-5.0.375.70/third_party/libxml/parser.c">
   <explanation>
   function or method: xmlParseTryOrFinish
   line-by-line trace: 9961,9962,9963,9964,(9966,take the False branch),(10022,take the True branch),(10023,take the True branch),10024,10025,10027,10029,(10030,take the True branch),(10030,take the False branch),(10037,take the True branch),(10037,take the False branch),(10040,take the False branch),(10041,take the True branch),10042,10043,10042,(10066,take the False branch),10068,10188,10189,10190,10191,10192,(10194,take the True branch),(10194,take the False branch),10196,(10197,take the False branch),(10204,take the True branch),(10205,take the True branch),(10207,take the False branch),(10207,take the False branch),(10213,take the True branch),10214,(10220,take the False branch),10225,(10227,take the False branch),10241,(10240,take the True branch),(10240,take the True branch),(10240,take the True branch),(10241,take the True branch),(10241,take the True branch),10242,(10248,take the False branch),(10275,take the True branch),10276,(10284,take the True branch),(10285,read of variable `prefix')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `prefix' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1169">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="7720" path="chrome-5.0.375.70/third_party/libxml/tree.c">
   <explanation>
   function or method: xmlDOMWrapRemoveNode
   line-by-line trace: 7672,7673,7674,(7676,take the False branch),(7676,take the False branch),(7676,take the False branch),(7680,take the False branch),7683,7692,7693,7695,7697,7701,7702,7703,(7704,take the True branch),(7704,take the False branch),7714,(7715,take the True branch),(7719,take the True branch),(7720,read of variable `nbList')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `nbList' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1170">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="1143" path="chrome-5.0.375.70/third_party/libxslt/libxslt/numbers.c">
   <explanation>
   function or method: xsltFormatNumberConversion
   line-by-line trace: 948,949,950,951,952,953,954,955,956,957,962,964,966,(968,take the False branch),973,974,987,(988,take the False branch),997,(998,take the False branch),1002,1003,1004,1005,1006,1007,1008,1009,1010,1012,1018,1019,(1020,take the False branch),1032,1033,1034,(1033,take the True branch),(1034,take the False branch),1079,(1084,take the True branch),1085,1086,(1089,take the False branch),1134,(1142,take the True branch),(1143,read of variable `len')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `len' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1171">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="261" path="chrome-5.0.375.70/third_party/skia/src/core/SkEdgeClipper.cpp">
   <explanation>
   function or method: chopMonoCubicAt
   line-by-line trace: (236,take the False branch),(236,take the False branch),(236,take the False branch),238,239,240,241,243,244,245,246,247,(248,take the False branch),258,(261,read of variable `mid')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `mid' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1172">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="5554" path="chrome-5.0.375.70/third_party/sqlite/ext/fts2/fts2.c">
   <explanation>
   function or method: leavesReadersMerge
   line-by-line trace: 5536,5537,5538,5539,(5541,take the True branch),(5543,take the False branch),5552,(5554,read of variable `rc')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `rc' may be uninitialized
   </textoutput>
  </output>
 </weakness>
 <weakness id="1173">
  <name>
   SPC-uninit-var-some
  </name>
  <location line="1439" path="chrome-5.0.375.70/third_party/sqlite/src/os_unix.c">
   <explanation>
   function or method: unixLock
   line-by-line trace: 1287,1288,1289,1290,1291,1292,1294,(1303,take the False branch),1314,1315,1316,1320,1324,(1325,take the False branch),1329,(1334,take the True branch),(1335,take the False branch),(1335,take the False branch),(1345,take the True branch),(1346,take the False branch),(1346,take the False branch),1361,1362,1364,(1363,take the False branch),(1364,take the True branch),(1364,take the True branch),(1366,take the True branch),1367,1368,(1369,take the False branch),(1383,take the False branch),(1415,take the True branch),(1415,take the False branch),1424,1425,1426,1435,1436,(1438,take the True branch),(1439,read of variable `tErrno')
   </explanation>
  </location>
  <grade severity="3" probability="0.2"/>
  <output>
   <textoutput>
   Variable `tErrno' may be uninitialized
   </textoutput>
  </output>
 </weakness>
</report>
