It could be possible for the case-insensitive

Unicode-aware string comparison to wander off
to the la-la land.

p4raw-id: //depot/perl@13669

1 files changed, 4 insertions, 2 deletions

diff --git a/regexec.c b/regexec.c
index 0d97be3222..4b073d2da4 100644
--- a/regexec.c
+++ b/regexec.c
@@ -971,7 +971,8 @@ S_find_byclass(pTHX_ regexp * prog, regnode *c, char *s, char *strend, char *sta
 		    while (s <= e) {
 			if ( utf8_to_uvchr((U8*)s, &len) == c1
 			     && (ln == 1 ||
-				 ibcmp_utf8(s, do_utf8, m, UTF, ln)) )
+				 ibcmp_utf8(s, do_utf8,  strend - s,
+					    m, UTF, ln)) )
 			    goto got_it;
 			s += len;
 		    }
@@ -980,7 +981,8 @@ S_find_byclass(pTHX_ regexp * prog, regnode *c, char *s, char *strend, char *sta
 			UV c = utf8_to_uvchr((U8*)s, &len);
 			if ( (c == c1 || c == c2)
 			     && (ln == 1 ||
-				 ibcmp_utf8(s, do_utf8, m, UTF, ln)) )
+				 ibcmp_utf8(s, do_utf8, strend - s,
+					    m, UTF, ln)) )
 			    goto got_it;
 			s += len;
 		    }