From 86f361ce348686da9e0207d964353fc68fc0702b Mon Sep 17 00:00:00 2001
From: chrchr-github <noreply@github.com>
Date: Wed, 19 Aug 2026 23:13:38 +0200
Subject: [PATCH] Fix  #14980 Nullptr dereference in
 valueFlowDynamicBufferSize()

---
 lib/valueflow.cpp      | 2 +-
 test/testvalueflow.cpp | 5 +++++
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/lib/valueflow.cpp b/lib/valueflow.cpp
index 7acf7179723..4a41bd90537 100644
--- a/lib/valueflow.cpp
+++ b/lib/valueflow.cpp
@@ -7077,7 +7077,7 @@ static void valueFlowDynamicBufferSize(const TokenList& tokenlist, const SymbolD
             if (!rhs)
                 continue;
 
-            const bool isNew = rhs->isCpp() && (rhs->str() == "new" || Token::Match(rhs->astOperand1(), "::| operatornew"));
+            const bool isNew = rhs->isCpp() && (rhs->str() == "new" || (rhs->str() == "(" && Token::Match(rhs->astOperand1(), "::| operatornew")));
             if (!isNew && !Token::Match(rhs->previous(), "%name% ("))
                 continue;
 
diff --git a/test/testvalueflow.cpp b/test/testvalueflow.cpp
index 39916ddeb43..0762dacfcdb 100644
--- a/test/testvalueflow.cpp
+++ b/test/testvalueflow.cpp
@@ -8488,6 +8488,11 @@ class TestValueFlow : public TestFixture {
                "    };\n"
                "}\n";
         (void)valueOfTok(code, "E0");
+
+        code = "void f() {\n" // #14980
+               "    OpNew *newp = &operator new;\n"
+               "}\n";
+        (void)valueOfTok(code, "&");
     }
 
     void valueFlowHang() {