https://gcc.gnu.org/bugzilla/show_bug.cgi?id=114698
--- Comment #3 from Andrew Pinski <pinskia at gcc dot gnu.org> --- uint8_t buffer[SHA256_BLOCK_LENGTH]; W256 = (sha2_word32*)context->buffer; This is starting to smell like the code is violating strict aliasing rules ...