From d187af38667ebf647b0c80a220d87d95633dd34c Mon Sep 17 00:00:00 2001
From: Juha Reunanen <juha.reunanen@tomaattinen.com>
Date: Thu, 10 Nov 2022 16:43:36 +0200
Subject: [PATCH] `assert` that value being converted to `unsigned int` is not
 negative

---
 src/lib/OpenEXR/ImfInputFile.cpp | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/src/lib/OpenEXR/ImfInputFile.cpp b/src/lib/OpenEXR/ImfInputFile.cpp
index e5e4d218d4..9cc0493565 100644
--- a/src/lib/OpenEXR/ImfInputFile.cpp
+++ b/src/lib/OpenEXR/ImfInputFile.cpp
@@ -33,6 +33,7 @@
 
 #include <algorithm>
 #include <fstream>
+#include <assert.h>
 
 OPENEXR_IMF_INTERNAL_NAMESPACE_SOURCE_ENTER
 
@@ -338,6 +339,7 @@ bufferedReadPixels (InputFile::Data* ifd, int scanLine1, int scanLine2)
                     switch (toSlice.type)
                     {
                         case UINT: {
+                            assert(toSlice.fillValue >= 0);
                             unsigned int fill = static_cast<unsigned int>(toSlice.fillValue);
                             for (int x = xStart; x <= levelRange.max.x;
                                  x += toSlice.xSampling)