2010/4/12 <John.X.Foster@nab.com.au>
Thanks for your suggestion,  but this is not the case. All the code has been built with these flags. Please see my follow-up post - I now believe ostringstream is the problem, and I have colleagues who have experienced similar problems with that class. There is also some internet correspondence on the topic.

Note that your code does not use ostringstream, so your analysis is wrong. I'm 99% sure that Steven's guess is correct. Try to recall how you built boost regex library. How did you pass _SECURE_SCL 0 and _HAS_ITERATOR_DEBUGGING 0 to it?

Roman Perepelitsa.