> > This is intentional. When 'addr' equals 'vend' the overflow path is triggered, but then the 'vstart' and 'vend' > values are not carried in the overflow path - making them point to no address. That is the reason 'addr' is used > in the warning message to specify the restrictive range - that gets assigned to 'va_start' and 'va_end' in the ideal case. > What do you mean when you say: "but then the 'vstart' and 'vend' values are not carried in the overflow path - making them point to no address."