* syntax.c (scan_sexps_forward): Avoid pointer wraparound.

diff --git a/src/ChangeLog b/src/ChangeLog
index 65c61943f6998a764fa42e5a10c25f6eeca235d9..7535954311164f7a62e1644445d320172fec480c 100644 (file)
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,5 +1,7 @@
 2011-03-27  Paul Eggert  <eggert@cs.ucla.edu>
 
+       * syntax.c (scan_sexps_forward): Avoid pointer wraparound.
+
        * xterm.c (x_make_frame_visible, same_x_server): Redo to avoid overflow
        concerns.
 

diff --git a/src/syntax.c b/src/syntax.c
index c1442c396c1be918797a4f7eb9743d56f0308278..0a1525b54eac67be503f420de44e0f76a9997ecf 100644 (file)
--- a/src/syntax.c
+++ b/src/syntax.c
@@ -3265,9 +3265,9 @@ do { prev_from = from;                            \
     = (curlevel == levelstart) ? -1 : (curlevel - 1)->last;
   state.location = from;
   state.levelstarts = Qnil;
-  while (--curlevel >= levelstart)
-      state.levelstarts = Fcons (make_number (curlevel->last),
-                                state.levelstarts);
+  while (curlevel > levelstart)
+    state.levelstarts = Fcons (make_number ((--curlevel)->last),
+                              state.levelstarts);
   immediate_quit = 0;
 
   *stateptr = state;