https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67496
--- Comment #9 from Vittorio Zecca <zeccav at gmail dot com> --- My C is not better than yours, but length_from_typespec might have been incorrectly initialized elsewhere, otherwise it is a false positive.
