From: jackerli(李剑) <jackerli@tencent.com>
Date: Wed, 28 Sep 2022 08:41:59 +0000 (+0800)
Subject: fix: arc4_getword integer overflow, detected by -fsanitize=undefined
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=b5b4c7fed589aef04f6b5add5f0f0d9c2f1fd2f5;p=libevent

fix: arc4_getword integer overflow, detected by -fsanitize=undefined
---

diff --git a/arc4random.c b/arc4random.c
index b5f66b4c..c9533b17 100644
--- a/arc4random.c
+++ b/arc4random.c
@@ -418,7 +418,7 @@ arc4_getword(void)
 {
 	unsigned int val;
 
-	val = arc4_getbyte() << 24;
+	val = (unsigned)arc4_getbyte() << 24;
 	val |= arc4_getbyte() << 16;
 	val |= arc4_getbyte() << 8;
 	val |= arc4_getbyte();