Tcl Source Code

Example script and corresponding output with UBSan error (-fsanitize=signed-integer-overflow, excludes any previously reported errors):

proc p {} {
set a [string repeat [string repeat a 1023] 1049601]
set a2 [string cat a $a $a]
return [string toupper $a2]
}
set x [p]

tcl/generic/tclExecute.c:5520:6: runtime error: signed integer overflow: 2147483647 + 1 cannot be represented in type 'int'

(tclsh eventually exited normally)

Can be prevented with same approach used in [a03e9793d4]; see attached patch.

Fixed [a314f4ea6233c15d|here]. Thanks!