Thanks — your function-pointer instinct was exactly right, so we chased it into the scanner and have a root cause, a 6-line repro, and a candidate patch. 6-line self-contained repro (no wpa_supplicant needed) /* a.h */ void register_handler(RxResult (*handler)(void), void *data); /* b.c */ static int dispatch(void) { probe_call(); return 0; } $ cscope -bk a.h b.c -f cs.out $ cscope -d -f cs.out -L3 probe_call b.c RxResult 3 probe_call(); <-- phantom caller, from a DIFFERENT file b.c dispatch 3 probe_call();...
Line-oriented and -L query results are lossy on larger files: dropped rows, duplicated caller attributions, and drifted line numbers (cscope 15.9)