https://gcc.gnu.org/bugzilla/show_bug.cgi?id=105403
--- Comment #2 from liftdat at protonmail dot com --- (In reply to Geoff Keating from comment #1) > A PCH file is a trusted input, so this really shouldn’t happen, and there > are surely many other ways to trigger arbitrary code execution if you can > craft one. However a sanity check would do no harm, this code is not > performance relevant. Hi, I think it could also be the case when we have a ridiculously large PCH file, which means the file itself is legal but still contains a really large count value. In that extreme case, the input is still considered "trusted" but we still have a problem.