In the previous check-in, use a u32 instead of an int, to make it easier to

prove that the integer will never overflow.

FossilOrigin-Name: 51002079e0b499e116415189a913a238e95ed9766a8af9d042928f4263861a87

1 files changed, 3 insertions, 1 deletions

diff --git a/src/resolve.c b/src/resolve.c
index a0134fd57..5f675c1d2 100644
--- a/src/resolve.c
+++ b/src/resolve.c
@@ -1838,7 +1838,9 @@ static int resolveSelectStep(Walker *pWalker, Select *p){
         }
       }
     }
-    if( pOuterNC ) pOuterNC->nNestedSelect--;
+    if( pOuterNC && ALWAYS(pOuterNC->nNestedSelect>0) ){
+      pOuterNC->nNestedSelect--;
+    }
  
     /* Set up the local name-context to pass to sqlite3ResolveExprNames() to
     ** resolve the result-set expression list.