OK, I fixed that bug in the front end. Now I get an abort in add_pointed_to_var. The reason is that DECL_INITIAL of a pointer is set to INTEGER_CST of zero, but add_pointed_to_var expects an ADDR_EXPR.