Coverity FORWARD_NULL - CID 12460 - src/match.cpp - in function: matchOpsToString(std::list<MatchOp *, std::allocator<MatchOp *>> &) - Dynamic cast to pointer "dynamic_cast <MatchExpOp *>(op)" can return NULL. Passing null pointer "dynamic_cast <MatchExpOp *>(op)->value" to function "std::basic_string<char, std::char_traits<char>, std::allocator<char> >::operator +=(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const &)", which dereferences it.

This bug is exported from the Coverity Integration Manager on Canonical's servers. For information on how this is done please see this website: https://wiki.ubuntu.com/CanonicalProductStrategy/Coverity
CID: 12460
Checker: FORWARD_NULL
Category: dynamic_cast
CWE definition: http://cwe.mitre.org/data/definitions/476.html
File: /tmp/buildd/compiz-0.9.9~daily13.01.14/src/match.cpp
Function: matchOpsToString(std::list<MatchOp *, std::allocator<MatchOp *>> &)
Code snippet:
426
427 if (op->flags & MATCH_OP_NOT_MASK)
428 value += "!";
429
CID 12460 - FORWARD_NULL
Dynamic cast to pointer "dynamic_cast <MatchExpOp *>(op)" can return NULL.
Passing null pointer "dynamic_cast <MatchExpOp *>(op)->value" to function "std::basic_string<char, std::char_traits<char>, std::allocator<char> >::operator +=(std::basic_string<char, std::char_traits<char>, std::allocator<char> > const &)", which dereferences it.
430 value += dynamic_cast <MatchExpOp *> (op)->value;
431 value += " ";
432 break;
433 default:
434 break;
435 }