https://gcc.gnu.org/bugzilla/show_bug.cgi?id=106762
--- Comment #3 from Matt Taylor <para at tampabay dot rr.com> --- Actually one thing that I said before does not make sense. I said that the analysis seems to allow a 1 byte write to NULL but not 2 or more. However, the warning does not trigger if the offset of the field in the structure is zero despite the fact that it's writing 8 bytes and claims to have bounds of [0,0]. I haven't looked into this further, but perhaps it's only checking the initial offset and ignoring the size?