https://gcc.gnu.org/bugzilla/show_bug.cgi?id=65369
--- Comment #19 from Jakub Jelinek <jakub at gcc dot gnu.org> --- Yeah. In md4_digest, for (i = 0; i < 16 - 2; i++) look writes data[0] through data[13], data[14] is stored after the loop, but data[15] is uninitialized, but md5_transform reads it and uses it.