From 4b2cc2f43e6e503b57c3e59499bebba907663871 Mon Sep 17 00:00:00 2001
From: "rogerl%netscape.com" <rogerl%netscape.com>
Date: Tue, 16 Nov 1999 23:54:18 +0000
Subject: [PATCH] r=norris. Fix overrun by back-reference digit sequence
 parsing.

---
 js/src/jsregexp.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/js/src/jsregexp.c b/js/src/jsregexp.c
index e01b94bcc18d..7a93a3ed6f0a 100644
--- a/js/src/jsregexp.c
+++ b/js/src/jsregexp.c
@@ -1003,6 +1003,7 @@ do_octal:
                     num = (uintN)JS7_UNDEC(c);
                     for (c = *++cp; JS7_ISDEC(c); c = *++cp)
 		        num = 10 * num + (uintN)JS7_UNDEC(c);
+                    cp--;
 	            ren = NewRENode(state, REOP_BACKREF, NULL);
 	            if (!ren)
 		        return NULL;