From 9a091756bbc40e8d359ac59e4b892c0835f57bae Mon Sep 17 00:00:00 2001
From: "jan.nijtmans" <nijtmans@users.sourceforge.net>
Date: Sun, 6 Mar 2022 16:10:06 +0000
Subject: Fix [4789e18fcb]: signed integer overflow during obj-31.6

---
 generic/tclUtil.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/generic/tclUtil.c b/generic/tclUtil.c
index 858163e..8d2347b 100644
--- a/generic/tclUtil.c
+++ b/generic/tclUtil.c
@@ -3730,7 +3730,8 @@ UpdateStringOfEndOffset(
     memcpy(buffer, "end", 4);
     if (objPtr->internalRep.longValue != 0) {
 	buffer[len++] = '-';
-	len += TclFormatInt(buffer+len, -(objPtr->internalRep.longValue));
+	len += TclFormatInt(buffer+len,
+		(long)(-(unsigned long)(objPtr->internalRep.longValue)));
     }
     objPtr->bytes = (char *)ckalloc(len+1);
     memcpy(objPtr->bytes, buffer, len+1);
@@ -3842,8 +3843,7 @@ SetEndOffsetFromAny(
 	}
 	if (bytes[3] == '-') {
 
-	    /* TODO: Review overflow concerns here! */
-	    offset = -offset;
+	    offset = (int)(-(unsigned int)offset);
 	}
     } else {
 	/*
-- 
cgit v0.12