#include <string>
using namespace std;

int main()
{
	string *s = static_cast<string*>( ::operator new[](sizeof(string)*2) );
	new(s) string();
	new(s+1) string();

	delete[] s;
}

Segmentation fault