From c2d54d4bfabe3f45f6a67e75c767e128bcc05837 Mon Sep 17 00:00:00 2001
From: morkt <muvluv.ru@gmail.com>
Date: Thu, 21 May 2015 23:42:03 +0400
Subject: [PATCH] (UnpackV0): limit decompression loop by input length.

---
 ArcFormats/ImagePT1.cs | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ArcFormats/ImagePT1.cs b/ArcFormats/ImagePT1.cs
index e158d79b..c1558ce9 100644
--- a/ArcFormats/ImagePT1.cs
+++ b/ArcFormats/ImagePT1.cs
@@ -578,7 +578,7 @@ namespace GameRes.Formats.Ffa
                 byte[] frame = new byte[0x1000]; // word_461A28
                 PopulateLzssFrame (frame);
                 int ebp = 0xfee;
-                for (;;)
+                while (src < m_input.Length)
                 {
                     byte ah = m_input[src++];
                     for (int mask = 1; mask != 0x100; mask <<= 1)