Signed integer recovered as unsigned integer

[yangzao]

Description

Original code:

for (int loop = (4); loop < (-112); loop++)

Decompiled code:

unsigned int v1;  // [bp-0x2c]
...
for (v1 = 4; v1 < -112; v1 += 1)

The for loop condition is not met in original code,
but because v1 in declared as unsigned int, the condition actually becomes v1 < 4294967184.
So the for loop can be iterated in decompiled code.

Steps to reproduce the bug

Files:
8.zip

(0. the exec is included as orig_exec)

1. compile orig,c into a Mach-O exec (I used OS X Cross on Linux) with Clang and -O0.
2. decompile the exec with angr.
3. the issue is at the last for loop of the second function (original name func_1 is not recovered).

Environment

No response

Additional context

No response