> Hard to imagine how that could lead to any security compromise Integer overflows as a vulnerability class are often very bad, but usually when they're descri

> Hard to imagine how that could lead to any security compromise Integer overflows as a vulnerability class are often very bad, but usually when they're describing an attacker-controlled memory allocation size (which the attacker's buffer will then go on to overflow, often to byte-specific length accuracy). Sounds like the reviewer here could have been someone primed to think that "integer overflow" meant "integer overflow controlling a memory allocation", which doesn't seem to be the case here at all.