Take a look at all the complaints about evalu8.c. They're all false positives. Consider that this code has been in use for 25 years now. It's been used by several hundred thousand developers. If it was so chock full of scores of undefined values and null pointer dereferences, I probably would have heard about it by now!