id	summary	reporter	owner	description	type	status	milestone	component	version	severity	resolution	keywords	cc
13129	bracket_and_solve_root, toms748_solve; underflow when max_iter == 0	Tom C <clunietp@…>	John Maddock	"~line 295, math/tools/toms748_solve.hpp

std::pair<T, T> toms748_solve(...)

Parameter max_iter is boost::uintmax_t.  Line ~343 decrements count (--count) with no prior checks on the value of max_iter, resulting in an underflow if the provided max_iter==0.

This was discovered when calling bracket_and_solve root (with max_iters==15), which internally calls toms748_solve with max_iter==0, leading to the underflow/infinite(?) loop.

Unfortunately due to the nature of bracket_and_solve root I'm unable to provide a minimal repro, but to repro the underflow simply call toms748_solve with max_iter==0, which it does not appear to be checking against.

Alternatively/additionally, bracket_and_solve root is calling toms748_solve with max_iter==0; I don't know if that is desired behavior."	Bugs	closed	To Be Determined	math	Boost 1.64.0	Problem	obsolete