On Thu, Jun 23, 2022 at 5:57 PM Ruediger Pluem <rpl...@apache.org> wrote: > > On 6/23/22 1:43 PM, yla...@apache.org wrote: > > > > --- apr/apr/trunk/json/apr_json_decode.c (original) > > +++ apr/apr/trunk/json/apr_json_decode.c Thu Jun 23 11:43:05 2022 > > @@ -353,7 +353,7 @@ static apr_status_t apr_json_decode_arra > > apr_json_value_t * array) > > { > > apr_status_t status = APR_SUCCESS; > > - apr_size_t count = 0; > > + int count = 0; > > Wouldn't we need to guard against overflow then?
Probably yes, r1902207. Thanks for the review; Yann.