From 616b93b0239bfc54be3cc05955f22e6a07ed0127 Mon Sep 17 00:00:00 2001 From: "jan.nijtmans" Date: Fri, 8 Apr 2022 09:10:22 +0000 Subject: Fix [05ff16e799]: signed integer overflow in ExtendStringRepWithUnicode() --- generic/tclStringObj.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/generic/tclStringObj.c b/generic/tclStringObj.c index 4afd12a..b81e711 100644 --- a/generic/tclStringObj.c +++ b/generic/tclStringObj.c @@ -3341,7 +3341,7 @@ ExtendStringRepWithUnicode( } for (i = 0; i < numChars && size >= 0; i++) { - size += Tcl_UniCharToUtf((int) unicode[i], buf); + size += (unsigned int)Tcl_UniCharToUtf((int) unicode[i], buf); } if (size < 0) { Tcl_Panic("max size for a Tcl value (%d bytes) exceeded", INT_MAX); -- cgit v0.12