Converting the strlen/sprintf pass to Ranger has considerably improved the accuracy of -Wformat-overflow warnings: they can avoid triggering for safe input even at -O0 while at the same time detect provable overflow. The conversion didn't come with any tests so in r12-6591 I committed one that verifies both of these improvements.
https://gcc.gnu.org/pipermail/gcc-cvs/2022-January/359299.html Martin