It's a buffer overflow in snes_draw_tile_object(). ii can sometimes be >= 256 and that isn't tested.

Last edited by jbo_85; 03/08/10 11:10 AM.