... and Raymond Chen posted an article on operator::new and integer overflows. Here it is.