id,summary,reporter,owner,description,type,status,milestone,component,version,severity,resolution,keywords,cc
6701,integer overflows in ordered_malloc(),Xi Wang <xi.wang@…>,John Maddock,"Consider pool::ordered_malloc(size_type n).

    const size_type total_req_size = n * requested_size;

Given a large n, total_req_size will wrap around to a small integer.  The allocated memory would be smaller than expected, leading to a potential buffer overflow.
",Bugs,new,To Be Determined,pool,Boost Development Trunk,Problem,,,