This is about optimizations affecting timing of cryptographic code, not correctness of computation, the argument for calling this a correctness bug in the compiler is quite weak I think.

Eh https://news.ycombinator.com/item?id=41146860