1 files changed, 2 insertions, 0 deletions
diff --git a/target-i386/helper.c b/target-i386/helper.c
index 9bd1158b06..6fc136763a 100644
--- a/target-i386/helper.c
+++ b/target-i386/helper.c
@@ -1705,6 +1705,8 @@ static inline void helper_ret_protected(int shift, int is_iret, int addend)
         validate_seg(R_DS, cpl);
         validate_seg(R_FS, cpl);
         validate_seg(R_GS, cpl);
+
+        sp += addend;
     }
     ESP = (ESP & ~sp_mask) | (sp & sp_mask);
     env->eip = new_eip;