https://gcc.gnu.org/bugzilla/show_bug.cgi?id=103533
--- Comment #2 from David Malcolm <dmalcolm at gcc dot gnu.org> --- Note that as well as the scaling issues, there currently aren't that many sources of taint (currently just a hardcoded one for the result fread); a lot more would be added by [PATCH 0/6] RFC: adding support to GCC for detecting trust boundaries https://gcc.gnu.org/pipermail/gcc-patches/2021-November/584372.html but that patch kit isn't in yet.