// CWE-416: use after free.
#include <stdlib.h>
__attribute__((noinline)) int vuln(void) {
    int* p = (int*)malloc(sizeof(int));
    *p = 7;
    free(p);
    return *p; // sink: use after free
}
int main(void) { return vuln(); }