[ffumero2003]

Problem

CodeQL reports a high go/incorrect-integer-conversion alert (#9) on main at base/base.go in newFileReaderWithMaxLength:

ContentLength: int(min(contentLength, maxInt, int64(^uint(0)>>1))),

The cast is provably safe — min(..., int64(^uint(0)>>1)) clamps to the platform maximum int — but CodeQL does not recognize int64(^uint(0)>>1) as a bound, so it flags it. The open alert holds the release (make release-check, per RELEASE.md).

Changes

Rewrite the saturation with an explicit math.MaxInt upper-bound guard — the pattern CodeQL recognizes as a sanitizer, and clearer to read:

length := min(contentLength, maxInt)
if length > math.MaxInt {
    length = math.MaxInt
}
// ...
ContentLength: int(length),

Behavior is identical: int64(^uint(0)>>1) is math.MaxInt, so the old triple-min and the new guard compute the same value. base.FileReader.ContentLength still saturates at the platform maximum int without limiting the response body; maxInt remains the test seam for the 32-bit path.

Verification

• go build ./..., go vet ./base, gofmt -l base/base.go: clean.
• go test -race ./base ./b2/...: PASS (base, b2, b2/sync), including the fix(base): preserve large-file responses on 32-bit targets #370 32-bit content-length tests.
• CodeQL re-scans main after merge; alert Fix test broken by 83b9008 #9 is expected to clear. If it does not, the conversion will be adjusted further.

Behavior-preserving internal change, no user-facing behavior change (skip-changelog).

Closes #378