The reference to moving into C99 is kind of interesting, given the security work paid by Google to remove all uses of VLAs, I thought they were already using it anyway.