prevent integer overflow when compiling a regexp

Fixes [perl #131893].

1 files changed, 6 insertions, 2 deletions

diff --git a/regcomp.c b/regcomp.c
index fcedc3629f..c01fec6fe6 100644
--- a/regcomp.c
+++ b/regcomp.c
@@ -5941,8 +5941,12 @@ Perl_re_printf( aTHX_  "LHS=%" UVuf " RHS=%" UVuf "\n",
                     data->cur_is_floating = 1; /* float */
             }
             min += min1;
-            if (delta != SSize_t_MAX)
-                delta += max1 - min1;
+            if (delta != SSize_t_MAX) {
+                if (SSize_t_MAX - (max1 - min1) >= delta)
+                    delta += max1 - min1;
+                else
+                    delta = SSize_t_MAX;
+            }
             if (flags & SCF_DO_STCLASS_OR) {
                 ssc_or(pRExC_state, data->start_class, (regnode_charclass *) &accum);
                 if (min1) {