From d7c87d056202228c93bc05b57564ea887bdaad92 Mon Sep 17 00:00:00 2001
From: CJ van den Berg <cj@vdbonline.com>
Date: Thu, 12 Mar 2026 19:27:48 +0100
Subject: [PATCH] fix: panic on decode of a large negative integer

---
 src/cbor.zig | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/src/cbor.zig b/src/cbor.zig
index c91c2d2..a733d58 100644
--- a/src/cbor.zig
+++ b/src/cbor.zig
@@ -367,7 +367,9 @@ fn decodePInt(iter: *[]const u8, minor: u5) error{ TooShort, InvalidPIntType }!u
 }
 
 fn decodeNInt(iter: *[]const u8, minor: u5) Error!i64 {
-    return -@as(i64, @intCast(try decodePInt(iter, minor) + 1));
+    const n = try decodePInt(iter, minor);
+    if (n > maxInt(i64)) return error.IntegerTooSmall;
+    return -1 - @as(i64, @intCast(n));
 }
 
 pub fn decodeMapHeader(iter: *[]const u8) error{ TooShort, InvalidMapType, InvalidPIntType }!usize {