https://gcc.gnu.org/bugzilla/show_bug.cgi?id=116984
--- Comment #4 from Kees Cook <kees at outflux dot net> --- (In reply to Andrew Pinski from comment #1) > I don't think so since &p->array[negative] is undefined behavior even inside > a dynamic boz. Without counted_by, that is true. With counted_by all out of bounds calculations are defined to result in a 0 bdos.