diff options
author | jan.nijtmans <nijtmans@users.sourceforge.net> | 2022-04-08 09:10:22 (GMT) |
---|---|---|
committer | jan.nijtmans <nijtmans@users.sourceforge.net> | 2022-04-08 09:10:22 (GMT) |
commit | 616b93b0239bfc54be3cc05955f22e6a07ed0127 (patch) | |
tree | dc0c2b816df18739d7017920a0fbf25e10e76598 | |
parent | 3899582e36ab11dba2246f3fe06e894adfaecb2c (diff) | |
download | tcl-616b93b0239bfc54be3cc05955f22e6a07ed0127.zip tcl-616b93b0239bfc54be3cc05955f22e6a07ed0127.tar.gz tcl-616b93b0239bfc54be3cc05955f22e6a07ed0127.tar.bz2 |
Fix [05ff16e799]: signed integer overflow in ExtendStringRepWithUnicode()
-rw-r--r-- | generic/tclStringObj.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/generic/tclStringObj.c b/generic/tclStringObj.c index 4afd12a..b81e711 100644 --- a/generic/tclStringObj.c +++ b/generic/tclStringObj.c @@ -3341,7 +3341,7 @@ ExtendStringRepWithUnicode( } for (i = 0; i < numChars && size >= 0; i++) { - size += Tcl_UniCharToUtf((int) unicode[i], buf); + size += (unsigned int)Tcl_UniCharToUtf((int) unicode[i], buf); } if (size < 0) { Tcl_Panic("max size for a Tcl value (%d bytes) exceeded", INT_MAX); |