From 7041d0c978c536c3d19cf98386f40a25d0b0cd23 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20Janiszewski?= Date: Tue, 30 Jan 2018 15:49:29 +0100 Subject: [PATCH] Fix #7085: Track design placement going over buffer --- src/openrct2/ride/TrackDesign.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/openrct2/ride/TrackDesign.cpp b/src/openrct2/ride/TrackDesign.cpp index 24b27c0742..90e6792ed7 100644 --- a/src/openrct2/ride/TrackDesign.cpp +++ b/src/openrct2/ride/TrackDesign.cpp @@ -750,7 +750,8 @@ track_design_place_scenery(rct_td6_scenery_element * scenery_start, uint8 rideIn new_tile = 0; break; } - if (selectionTile + 1 >= &gMapSelectionTiles[300]) + // Need to subtract one because selectionTile in following block is incremented + if (selectionTile + 1 >= &gMapSelectionTiles[Util::CountOf(gMapSelectionTiles) - 1]) { new_tile = 0; break;