diff --git a/sudo.tab.c b/sudo.tab.c
index a18403e0e..7111717e1 100644
--- a/sudo.tab.c
+++ b/sudo.tab.c
@@ -1193,9 +1193,9 @@ case 25:
 			     * saving (or if nothing else is on the stack)
 			     * and clear match status.
 			     */
-			    if ((user_matches == TRUE && host_matches == TRUE &&
-				cmnd_matches != -1 && runas_matches != -1) ||
-				top == 1)
+			    if (user_matches == TRUE && host_matches == TRUE &&
+				((cmnd_matches != -1 && runas_matches != -1) ||
+				top == 1))
 				pushcp;
 			    cmnd_matches = -1;
 			}