diff --git a/mozilla/content/html/style/src/nsCSSScanner.cpp b/mozilla/content/html/style/src/nsCSSScanner.cpp
index dc07e9cbe82..51fc7a7c412 100644
--- a/mozilla/content/html/style/src/nsCSSScanner.cpp
+++ b/mozilla/content/html/style/src/nsCSSScanner.cpp
@@ -438,6 +438,7 @@ PRBool nsCSSScanner::NextURL(PRInt32& aErrorCode, nsCSSToken& aToken)
           // Whitespace is allowed at the end of the URL
           (void) EatWhiteSpace(aErrorCode);
           if (LookAhead(aErrorCode, ')')) {
+            Pushback(')');  // leave the closing symbol
             // done!
             break;
           }
diff --git a/mozilla/layout/html/style/src/nsCSSScanner.cpp b/mozilla/layout/html/style/src/nsCSSScanner.cpp
index dc07e9cbe82..51fc7a7c412 100644
--- a/mozilla/layout/html/style/src/nsCSSScanner.cpp
+++ b/mozilla/layout/html/style/src/nsCSSScanner.cpp
@@ -438,6 +438,7 @@ PRBool nsCSSScanner::NextURL(PRInt32& aErrorCode, nsCSSToken& aToken)
           // Whitespace is allowed at the end of the URL
           (void) EatWhiteSpace(aErrorCode);
           if (LookAhead(aErrorCode, ')')) {
+            Pushback(')');  // leave the closing symbol
             // done!
             break;
           }
diff --git a/mozilla/layout/style/nsCSSScanner.cpp b/mozilla/layout/style/nsCSSScanner.cpp
index dc07e9cbe82..51fc7a7c412 100644
--- a/mozilla/layout/style/nsCSSScanner.cpp
+++ b/mozilla/layout/style/nsCSSScanner.cpp
@@ -438,6 +438,7 @@ PRBool nsCSSScanner::NextURL(PRInt32& aErrorCode, nsCSSToken& aToken)
           // Whitespace is allowed at the end of the URL
           (void) EatWhiteSpace(aErrorCode);
           if (LookAhead(aErrorCode, ')')) {
+            Pushback(')');  // leave the closing symbol
             // done!
             break;
           }