https://gcc.gnu.org/bugzilla/show_bug.cgi?id=79647
--- Comment #2 from Andrew Pinski <pinskia at gcc dot gnu.org> --- int async_jobs = 0; ... async_jobs = atoi(opt_arg()); .... loopargs_len = (async_jobs == 0 ? 1 : async_jobs); loopargs = app_malloc(loopargs_len * sizeof(loopargs_t), "array of loopargs"); memset(loopargs, 0, loopargs_len * sizeof(loopargs_t)); Actually in my mind there is a security hole here as the async_jobs is not checked and it is an user input.