https://gcc.gnu.org/bugzilla/show_bug.cgi?id=115735
--- Comment #8 from David Malcolm <dmalcolm at gcc dot gnu.org> --- Not only are we not treating "syslog" as unsafe, we're also failing to handle sigaction as a way of setting a signal handler. I'm taking a look.