https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65077
--- Comment #6 from Richard Biener <rguenth at gcc dot gnu.org> --- (In reply to anders.blomdell from comment #5) > No, but my users insists on using Matlab/Simulink, and the testcase is a > heavily downsized version of what is done in their S-functions. I mean - seriously storing a pointer as FP values of the upper/lower word of the pointer? So I suppose this is what Matlab/Simulink generate internally and what gets compiled - thus this is machine generated? A workaround is to use -fno-tree-pta btw (for 64bit pointers the out-of-bound write still occurs, but that may be due to your simplification?).