Looks like clang's static analyser needs two passes.