Here is an unintended bug I encountered recently, hopefully the "cert" warning will catch this one too.
int okay_to_increment (int i) { if (i + 1 < i) return 0; /* adding 1 would cause overflow */ return 1; /* adding 1 is safe */ } Any sort of bug can cause a security vulnerability, so I recommend that gcc developers work harder on warning messages. Tom Truscott