Interger overflow in eval trigger write out of bound

How it was found

Hi security team, i reported some samples triggered crash in eval funtion in perl. The bug come because variable start and items used type I32 which takes half the range of line_t and folds it into negative numbers, leading to trying to store the lines at negative indexes.