From cc07a214c1219bce95c928be23f4624a6d09db26 Mon Sep 17 00:00:00 2001 From: wargio Date: Mon, 6 Jul 2026 08:49:26 +0800 Subject: [PATCH] Fix signed multiplication overflow --- librz/core/cmd/cmd_analysis.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/librz/core/cmd/cmd_analysis.c b/librz/core/cmd/cmd_analysis.c index 3f9efb5354..1eca557495 100644 --- a/librz/core/cmd/cmd_analysis.c +++ b/librz/core/cmd/cmd_analysis.c @@ -5394,10 +5394,10 @@ RZ_IPI RzCmdStatus rz_analyze_n_ins_handler(RzCore *core, int argc, const char * RZ_IPI RzCmdStatus rz_analyze_n_ins_size_handler(RzCore *core, int argc, const char **argv) { ut32 count = 1, obs = core->blocksize; - st32 l; if (argc > 1) { - l = (st32)rz_num_math(core->num, argv[1]); + // on purpose casting down to avoid mult overflow. + st64 l = (st32)rz_num_math(core->num, argv[1]); if (l <= 0) { RZ_LOG_ERROR("Invalid zero or negative arguments.\n"); return RZ_CMD_STATUS_ERROR;