https://gcc.gnu.org/bugzilla/show_bug.cgi?id=110848
--- Comment #22 from Martin Uecker <muecker at gwdg dot de> --- There may be many good reasons to prefer std::vector over VLAs in C++ but security and safety is not one of them. There are plenty of CVEs caused by std::vector out-of-bounds accesses. The question is whether in GNU mode one should warn about a GNU extension. People who want to avoid VLAs for reasons of standard compliance would also not use a GNU mode.