It's not only the fmr_pools. The FMR API operates on a page granularity, so a sub-page registration, or a non-page-aligned one, ends up exposing data outside the buffer. This is done silently, and is a significant vulnerability for most upper layers.
You're right Tom, I forgot about that... I guess I'd vote to remove it altogether then...
