id,summary,reporter,owner,description,type,status,milestone,component,version,severity,resolution,keywords,cc
11536,string_ref::substr length overflow,bibmaster@…,Marshall Clow,"basic_string_ref::substr returns invalid object in some cases:
{{{#!C++
string_ref s1(""hello"");
string_ref s2 = s1.substr(0, string_ref::npos - 1);
// EXPECT s2.size() <= s1.size()
}}}
version with overflow check:
{{{#!C++
basic_string_ref substr(size_type pos, size_type n=npos) const {
            ...
            // add overflow check: pos + n < n
            if ( n == npos || pos + n > size() || pos + n < n )
                n = size () - pos;
            ...
}}}",Bugs,closed,To Be Determined,utility,,Problem,fixed,,