From 4afa64828b9a310f0348b430b9597e1cc6364760 Mon Sep 17 00:00:00 2001
From: bellard <bellard@c046a42c-6fe2-441c-8c8c-71466251a162>
Date: Sat, 20 Mar 2004 22:04:16 +0000
Subject: [PATCH] fixed protected lret imm insn (one more OS/2 fix)

git-svn-id: svn://svn.savannah.nongnu.org/qemu/trunk@673 c046a42c-6fe2-441c-8c8c-71466251a162
---
 target-i386/helper.c | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/target-i386/helper.c b/target-i386/helper.c
index 9bd1158b06..6fc136763a 100644
--- a/target-i386/helper.c
+++ b/target-i386/helper.c
@@ -1705,6 +1705,8 @@ static inline void helper_ret_protected(int shift, int is_iret, int addend)
         validate_seg(R_DS, cpl);
         validate_seg(R_FS, cpl);
         validate_seg(R_GS, cpl);
+
+        sp += addend;
     }
     ESP = (ESP & ~sp_mask) | (sp & sp_mask);
     env->eip = new_eip;