From: Howard Chu <hyc@openldap.org>
Date: Thu, 16 Oct 2025 16:25:14 +0000 (+0100)
Subject: ITS#10401 liblber: fix shift of negative int in ber_decode_int()
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b0f486e72efe8e9d7fb67329bf784195973768d1;p=thirdparty%2Fopenldap.git

ITS#10401 liblber: fix shift of negative int in ber_decode_int()

There's no actual possibility of overflow but sanitizers will complain.
---

diff --git a/libraries/liblber/decode.c b/libraries/liblber/decode.c
index 1bc897d9b9..4bb095c4fc 100644
--- a/libraries/liblber/decode.c
+++ b/libraries/liblber/decode.c
@@ -313,7 +313,7 @@ ber_decode_int( const struct berval *bv, ber_int_t *num )
 
 		/* shift in the bytes */
 		for( i = 1; i < len; i++ ) {
-			netnum = (netnum << 8 ) | buf[i];
+			netnum = ((unsigned)netnum << 8 ) | buf[i];
 		}
 
 		*num = netnum;