[patrec]

Why would it need overflow checks when subtracting two valid pointers?

[saagarjha]

The overflow is in size * count

[patrec]

Of course -- thanks!