# HG changeset patch
# User Paul Eggert <eggert@cs.ucla.edu>
# Date 1548969884 28800
# Node ID f533980eb42fc5485f633dd756efac0a8eff2f30
# Parent  c1aa6d1185eae6eebfcd37c06f43fd609a07515d
autoupdate

diff -r c1aa6d1185ea -r f533980eb42f lib/regexec.c
--- a/lib/regexec.c	Wed Jan 30 03:53:43 2019 +0100
+++ b/lib/regexec.c	Thu Jan 31 13:24:44 2019 -0800
@@ -1293,8 +1293,10 @@
 	      else if (naccepted)
 		{
 		  char *buf = (char *) re_string_get_buffer (&mctx->input);
-		  if (memcmp (buf + regs[subexp_idx].rm_so, buf + *pidx,
-			      naccepted) != 0)
+		  if (mctx->input.valid_len - *pidx < naccepted
+		      || (memcmp (buf + regs[subexp_idx].rm_so, buf + *pidx,
+				  naccepted)
+			  != 0))
 		    return -1;
 		}
 	    }