Mark Millard has reported another case of undefined behavior in a central library function, detected on a system built with UBSAN and ASAN:
/usr/main-src/lib/libc/stdio/fread.c:133:10: runtime error: applying zero offset to null pointer
The pointer calculated in this way is then passed as source address to memcpy(), but with a length parameter of 0 in all observed cases.