From f64a3d180b21f6c18f217d23be7ebf0cad1514f1 Mon Sep 17 00:00:00 2001 From: peter1138 Date: Fri, 8 Dec 2006 19:35:13 +0000 Subject: [PATCH] (svn r7437) -Fix (r4583): incorrect minimum size check in some cases for VarAction2 --- newgrf.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/newgrf.c b/newgrf.c index 3eb3728278..308e925cc7 100644 --- a/newgrf.c +++ b/newgrf.c @@ -1624,7 +1624,7 @@ static void NewSpriteGroup(byte *buf, int len) case 2: group->g.determ.size = DSG_SIZE_DWORD; varsize = 4; break; } - check_length(bufend - buf, 2 + (varsize * 3) + 2, "NewSpriteGroup (Deterministic) (2)"); + check_length(bufend - buf, 5 + varsize, "NewSpriteGroup (Deterministic) (2)"); /* Loop through the var adjusts. Unfortunately we don't know how many we have * from the outset, so we shall have to keep reallocing. */