https://gcc.gnu.org/bugzilla/show_bug.cgi?id=83703
--- Comment #5 from Jakub Jelinek <jakub at gcc dot gnu.org> --- We provide the sanitizers (-fsanitize=undefined, -fsanitize=address, etc.) that you can use to find those issues at runtime. There are some warnings but runtime instrumentation can catch far more than warnings can.