[STDCXX-297] std::bitset constructor addressed memory beyond the object

• Type: Bug
• Status: Closed
• Priority: Trivial
• Resolution: Fixed
• Affects Version/s: 4.1.3
• Fix Version/s: 4.2.0
• Component/s: 23. Containers

Environment

All

• Assignee: Farid Zaripov
• Reporter: Farid Zaripov
• Created: 06/Oct/06 12:38
• Updated: 06/Jun/07 10:10
• Resolved: 19/Oct/06 06:54

Description

he program below fails:

------------------------------------------
#include <cassert>
#include <new>
#include <bitset>
#include <string>
#include <cstddef>
#include <string.h>

int main ()
{
typedef std::bitset<128> BitSet;
const std::size_t size = sizeof (BitSet);

char buf [size + 4];
memset (buf, '\xff', sizeof (buf));

BitSet* btest = new (buf) BitSet (std::basic_string<int> ());

for (std::size_t i = size; i < sizeof (buf); ++i)
assert ('\xff' == buf [i]);

btest->~BitSet ();

return 0;
}
------------------------------------------
Assertion failed: '\xff' == buf [i], file test.cpp, line 19

This application has requested the Runtime to terminate it in an unusual way.
Please contact the application's support team for more information.
------------------------------------------