https://gcc.gnu.org/bugzilla/show_bug.cgi?id=98247
--- Comment #3 from David Malcolm <dmalcolm at gcc dot gnu.org> --- Seems to work: Does not warn for provided example: https://godbolt.org/z/Wa3E8Mdqr If I increase the memset to access one beyond, it complains: https://godbolt.org/z/K6Wcneh8Y with the caveat that the current implementation of -Wanalyzer-out-of-bounds requires concrete (non-symbolic) sizes (see PR 106625).