id,summary,reporter,owner,description,type,status,milestone,component,version,severity,resolution,keywords,cc
2685,[serialization][variant]Deserializing 'which' should check for values less than 0,"Nevin "":-)"" Liber <nevin@…>",Robert Ramey,"In <boost/serialization/variant.hpp>:


{{{
template<class Archive, BOOST_VARIANT_ENUM_PARAMS(/* typename */ class T)>

void load(
    Archive & ar, 
    boost::variant<BOOST_VARIANT_ENUM_PARAMS(T)>& v,
    unsigned int version
){      
    int which;
    typedef BOOST_DEDUCED_TYPENAME boost::variant<BOOST_VARIANT_ENUM_PARAMS(T)>::types types;
    ar >> BOOST_SERIALIZATION_NVP(which);
    if(which >=  mpl::size<types>::value)
        // this might happen if a type was removed from the list of variant types
        boost::serialization::throw_exception(
            boost::archive::archive_exception(
                boost::archive::archive_exception::unsupported_version
            )
        );
       //...

}}}
Since 'which' is an int, there should be a check and an exception thrown if which < 0.",Bugs,closed,Boost 1.38.0,serialization,Boost 1.37.0,Problem,wontfix,,