From 9ef6980770425ebd37ec4cb7d8af1d006eea5d3b Mon Sep 17 00:00:00 2001
From: Retro-Junk
Date: Sun, 11 Sep 2016 00:22:48 +0300
Subject: FULLPIPE: Fix out of bounds write in Movement::removeFirstPhase

---
 engines/fullpipe/statics.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/engines/fullpipe/statics.cpp b/engines/fullpipe/statics.cpp
index 7b9737bdf9..83a0de0670 100644
--- a/engines/fullpipe/statics.cpp
+++ b/engines/fullpipe/statics.cpp
@@ -1979,8 +1979,8 @@ void Movement::removeFirstPhase() {
 			_dynamicPhases.remove_at(0);
 
 			for (uint i = 0; i < _dynamicPhases.size(); i++) {
-				_framePosOffsets[i - 1]->x = _framePosOffsets[i]->x;
-				_framePosOffsets[i - 1]->y = _framePosOffsets[i]->y;
+				_framePosOffsets[i]->x = _framePosOffsets[i + 1]->x;
+				_framePosOffsets[i]->y = _framePosOffsets[i + 1]->y;
 			}
 		}
 		_currDynamicPhaseIndex--;
-- 
cgit v1.2.3