Fix UB left shift of negative number
This commit is contained in:
parent
3bb2ca360e
commit
8df4327559
1 changed files with 1 additions and 1 deletions
|
@ -34907,7 +34907,7 @@ static int JS_WriteBigNum(BCWriterState *s, JSValueConst obj)
|
||||||
e = a->expn + 3;
|
e = a->expn + 3;
|
||||||
else
|
else
|
||||||
e = a->expn;
|
e = a->expn;
|
||||||
e = (e << 1) | a->sign;
|
e = (e * 2) | a->sign;
|
||||||
if (e < INT32_MIN || e > INT32_MAX) {
|
if (e < INT32_MIN || e > INT32_MAX) {
|
||||||
JS_ThrowInternalError(s->ctx, "bignum exponent is too large");
|
JS_ThrowInternalError(s->ctx, "bignum exponent is too large");
|
||||||
return -1;
|
return -1;
|
||||||
|
|
Loading…
Reference in a new issue