US-CERT Vulnerability Note VU#162289

[Ian Lance Taylor]

Florian Weimer <fw@deneb.enyo.de> writes:

>> To me, dubious optimizations like this at the very least should
>> be optional and able to be turned off.
>
> Why is this optimization dubious?  We would need to look at real-world
> code to tell, and so far, we haven't heard anything about the context in
> which the issue was originally encountered.

The basis of the optimization in question is
http://gcc.gnu.org/PR27039 .

A theoretical argument for why somebody might write problematic code
is http://www.fefe.de/openldap-mail.txt .

I don't know where, or even if, such code is actually found in the
wild.

Ian