diff --git a/gcc/testsuite/c-c++-common/analyzer/null-deref-pr110520.c b/gcc/testsuite/c-c++-common/analyzer/null-deref-pr110520.c
new file mode 100644
index 0000000000000000000000000000000000000000..b57027689eededd25eefe1e51961ee3d1a1a1946
--- /dev/null
+++ b/gcc/testsuite/c-c++-common/analyzer/null-deref-pr110520.c
@@ -0,0 +1,8 @@
+#include "analyzer-decls.h"
+
+int main(void) {
+    char buf[] = "0";
+    int *ptr = (int *)(__builtin_strlen(buf) - 1);
+    __analyzer_eval((__builtin_strlen(buf)) == 1); /* { dg-warning "TRUE" } */
+    *ptr = 10086; /* { dg-warning "dereference of NULL 'ptr'" } */
+}