* src/alloc.c (mark_maybe_object): Avoid signed integer overflow

diff --git a/src/alloc.c b/src/alloc.c
index da11426075bb3e0f180e082db2de602f1d4855d3..5220ef84783f293feb0b3a12cf266e9e3d70f52c 100644 (file)
--- a/src/alloc.c
+++ b/src/alloc.c
@@ -4652,7 +4652,8 @@ mark_maybe_object (Lisp_Object obj)
 #else
   (void) overflow;
 #endif
-  void *po = (char *) ((intptr_t) (char *) XLP (obj) + offset);
+  INT_ADD_WRAPV (offset, (intptr_t) (char *) XLP (obj), &offset);
+  void *po = (char *) offset;
 
   /* If the pointer is in the dump image and the dump has a record
      of the object starting at the place where the pointer points, we