Definitions of *_matched were wrong--user top, not top-2 as subscript.

diff --git a/sudo.h b/sudo.h
index edefbd91c515cc2d471b167c7df1c898cadc7aa7..c786a17ec73befadca861e681c1e8b50f541d757 100644 (file)
--- a/sudo.h
+++ b/sudo.h
@@ -65,13 +65,13 @@ extern struct matchstack *match;
 extern int top;
 
 #define user_matches   (match[top-1].user)
-#define user_matched   (match[top-2].user)
+#define user_matched   (match[top].user)
 #define cmnd_matches   (match[top-1].cmnd)
-#define cmnd_matched   (match[top-2].cmnd)
+#define cmnd_matched   (match[top].cmnd)
 #define host_matches   (match[top-1].host)
-#define host_matched   (match[top-2].host)
+#define host_matched   (match[top].host)
 #define runas_matches  (match[top-1].runas)
-#define runas_matched  (match[top-2].runas)
+#define runas_matched  (match[top].runas)
 #define no_passwd      (match[top-1].nopass)
 
 /*