analyzer: add regression test for fixed ICE [PR94028]

The C++ reproducer for PR analyzer/94028 generates a similar ICE
to that of the Fortran reproducer for PR analyzer/93993 and, like
it, was fixed by r10-7023-g3d66e153.

This patch adds the C++ reproducer as a regression test.

gcc/testsuite/ChangeLog:
	PR analyzer/94028
	* g++.dg/analyzer/pr94028.C: New test.

gcc/testsuite/ChangeLog

+2020-03-04  David Malcolm  <dmalcolm@redhat.com>
+
+	PR analyzer/94028
+	* g++.dg/analyzer/pr94028.C: New test.
+
 2020-03-04  Martin Sebor  <msebor@redhat.com>
 
 	PR middle-end/81401

gcc/testsuite/g++.dg/analyzer/pr94028.C

+void *calloc (__SIZE_TYPE__, __SIZE_TYPE__);
+
+struct B
+{
+  B (short);
+  int cls;
+} k (0);
+
+void d (int);
+
+enum e {} i;
+
+struct j
+{
+  void *operator new (__SIZE_TYPE__ b)
+  {
+    return calloc (b, sizeof (int)); // { dg-warning "leak" }
+  }
+  j (B *, int)
+  {
+  } // { dg-warning "leak" }
+};
+
+j *
+f (B * b, int h, bool)
+{
+  d (b->cls);
+  return new j (b, h); // { dg-warning "leak" }
+}
+
+void
+m ()
+{
+  if (i)
+    f (&k, 0, false);
+}