Description: CVE-2017-6004: crafted regular expression may cause denial of service Origin: upstream, https://vcs.pcre.org/pcre/code/trunk/pcre_jit_compile.c?r1=1676&r2=1680&view=patch Bug: https://bugs.exim.org/show_bug.cgi?id=2035 Bug-Debian: https://bugs.debian.org/855405 Forwarded: not-needed Author: Salvatore Bonaccorso Last-Update: 2017-02-17 Signed-off-by: Baruch Siach --- a/pcre_jit_compile.c +++ b/pcre_jit_compile.c @@ -8111,7 +8111,7 @@ if (opcode == OP_COND || opcode == OP_SC if (*matchingpath == OP_FAIL) stacksize = 0; - if (*matchingpath == OP_RREF) + else if (*matchingpath == OP_RREF) { stacksize = GET2(matchingpath, 1); if (common->currententry == NULL)