https://gcc.gnu.org/bugzilla/show_bug.cgi?id=67446
--- Comment #1 from Andrew Pinski <pinskia at gcc dot gnu.org> --- According to the source, it assumes the input to the sha1_process_block is aligned correctly. It might be a bug in ld passing an incorrect aligned block to that function.