From 09aeca6abf40b246b47e7d83851661294946785c Mon Sep 17 00:00:00 2001
From: Mike Pall <mike>
Date: Mon, 29 Apr 2013 14:28:10 +0200
Subject: [PATCH] Fix builtin string to number conversion for overflow digits.

---
 src/lj_strscan.c | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/src/lj_strscan.c b/src/lj_strscan.c
index 8d41a3e2..a71b86a2 100644
--- a/src/lj_strscan.c
+++ b/src/lj_strscan.c
@@ -187,7 +187,7 @@ static StrScanFmt strscan_dec(const uint8_t *p, TValue *o,
   if (dig) {
     uint32_t i = dig;
     if (i > STRSCAN_MAXDIG) {
-      ex10 -= (int32_t)(i - STRSCAN_MAXDIG);
+      ex10 += (int32_t)(i - STRSCAN_MAXDIG);
       i = STRSCAN_MAXDIG;
     }
     /* Scan unaligned leading digit. */
@@ -280,9 +280,10 @@ static StrScanFmt strscan_dec(const uint8_t *p, TValue *o,
 	if (d == 0 && i == DPREV(lo)) lo = i;
       }
       if (cy) {
+	hi = DPREV(hi);
 	if (xi[DPREV(lo)] == 0) lo = DPREV(lo);
 	else if (hi == lo) { lo = DPREV(lo); xi[DPREV(lo)] |= xi[lo]; }
-	hi = DPREV(hi); xi[hi] = (uint8_t)cy; idig++;
+	xi[hi] = (uint8_t)cy; idig++;
       }
     }