https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65369
--- Comment #5 from Martin Sebor <msebor at gcc dot gnu.org> --- While I haven't isolated it yet I suspect a bug in nettle and not one in gcc, for at least three reasons: First, the failures are insensitive to optimization levels. Second, the same two failures also appear on ppc64-redhat-linux with the system compiler (gcc 4.8.3). Finally, the same failures also appear when I use clang 3.6.0 to compile everything rather than gcc. The test results on x86_64 running Fedora 21 are clean but that's most likely because there nettle uses a different implementation of the encryption function (defined in the generated camellia-crypt-internal.s based on the handcoded assembly in x86_64/camellia-crypt-internal.asm).
