Jeffrey A Law wrote: > call_expr_flags calls flags_from_decl_or_type, which in turn tests > DECL_IS_MALLOC. > ECF_MALLOC is obvious, but it's not what I'm looking for. I know how to detect malloc-like calls. What I want to know is how to tell if it's going to return NULL on failure or not. Diego.