https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98217
--- Comment #4 from David Svoboda <svoboda at cert dot org> --- Martin: Thanks. It looks like -Wvla-larger-than=0 is (theoretically) a good way to catch VLA stack declarations. There is still the issue that GCC's -Wvla did not flag use of array[*]. To me that is lower-priority, but is still an issue.