From 260fa88bae0241e7c5bdff23b5042dc53f5f5f7d Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Micha=C5=82=20Janiszewski?= <janisozaur@gmail.com>
Date: Fri, 15 Jan 2016 15:24:33 +0100
Subject: [PATCH] Validate ride type to create

---
 src/ride/ride.c | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/ride/ride.c b/src/ride/ride.c
index 0edeb0fae6..95d7159567 100644
--- a/src/ride/ride.c
+++ b/src/ride/ride.c
@@ -5305,6 +5305,12 @@ money32 ride_create(int type, int subType, int flags, int *outRideIndex, int *ou
 	rct_ride_type *rideEntry;
 	int rideIndex, rideEntryIndex;
 
+	if (type > 90)
+	{
+		log_warning("Invalid request for ride type %u", type);
+		return MONEY32_UNDEFINED;
+	}
+
 	if (subType == 255) {
 		uint8 *availableRideEntries = get_ride_entry_indices_for_ride_type(type);
 		for (uint8 *rei = availableRideEntries; *rei != 255; rei++) {